medium6.1
CVE-2022-23184
In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.
Impact
In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Deploy | from 0.9 through 4.1.10 from 2018.1.0 through 2020.1.1 |
| Octopus | Octopus Server | from 2021.2.0 before 2021.2.8011 from 2021.3.0 before 2021.3.11057 |