medium6.1
CVE-2022-29890
In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.
Impact
In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Server | from 2019.7.0 before 2021.3.13021 from 2022.1.2121 before 2022.1.2849 from 2022.3.348 before 2022.3.2387 Version 2022.2.6729 |