medium4.3
CVE-2022-2258
In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items
Impact
In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Server | from 2019.1.0 before 2022.3.11098 from 2022.4.791 before 2022.4.8463 from 2023.1.4189 before 2023.1.9672 Version 2023.2.2028 |