high7.5
CVE-2022-2049
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function.
Impact
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Server | from 0.9 through 0.9.620.4 from 1.0 through 1.6.3.1723 from 2.0 through 2.6.5 from 3.0.0 through 3.17.14 from 4.0.4 through 4.1.10 from 2018.1.0 through 2018.12.1 |