medium5.3
CVE-2022-2783
In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token
Impact
In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Server | from 3.12.0 before 2022.1.3154 from 2022.2.6729 before 2022.2.7897 from 2022.3.348 before 2022.3.10586 |