Medium · 5.3 CVE-2022-4870 EUVD-2022-52130GHSA-x2rw-63pp-hj6c

In affected versions of Octopus Deploy it is possible to discover network details via error message

Published May 18, 2023 · Updated Jan 21, 2025 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Deploy it is possible to discover network details via error message

Affected products

Vendor	Product	Affected	Fixed
Octopus Deploy	Octopus Server	3.0 – < unspecified, unspecified – < 2023.1.9879	unspecified

Advisories 1

WID-SEC-2023-1227 Octopus Deploy: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · May 16, 2023

References

https://advisories.octopus.com/post/2023/sa2023-09/