medium6.5
CVE-2022-2528
In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages.
Impact
In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Server | from 3.0.0 through 4.1.10 from 2018.1.0 through 2021.3.13021 from 2022.1.0 before 2022.1.3106 from 2022.2.6729 before 2022.2.7718 from 2022.3.348 before 2022.3.7782 |