medium4.3
CVE-2022-1502
Permissions were not properly verified in the API on projects using version control in Git.
Impact
Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users with only ProjectView permissions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Server | from 2021.3 before 2021.3.12725 from 2022.1 before 2022.1.2454 |