medium4.3
CVE-2021-31818
Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API requ…
Impact
Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API request isn’t parameterised correctly. Exploiting this vulnerability could allow unauthorised access to database tables.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Server | from 2018.9.17 before 2018.13.0 from 2020.0.0 before 2020.6.0 from 2020.6.0 before 2020.6.5146 from 2021.1.0 before 2021.1.7316 |