medium5.3
CVE-2022-1901
In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview.
Impact
In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Server | from 2019.1.0 through 2019.7.3 from 2020.1.0 through 2020.6.5449 from 2021.1.6959 through 2021.3.13021 from 2022.1.0 before 2022.1.3009 from 2022.2.6729 before 2022.2.7244 from 2022.3.348 before 2022.3.4953 |