NetSight
high7.5

CVE-2022-2075

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation.

Impact

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation.

Affected products

VendorProductAffected versions
OctopusOctopus Server
from 0.9 through 0.9.620.4
from 1.0 through 1.6.3.1723
from 2.0 through 2.6.5
from 3.0.0 through 3.17.14
from 4.0.4 through 4.1.10
from 2018.1.0 through 2018.12.1

References