critical9.8
CVE-2022-2778
In affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null bytes.
Impact
In affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null bytes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Server | from 3.0 before 2022.2.8277 from 2022.3.348 before 2022.3.10405 from 2022.4.791 before 2022.4.1371 |