NetSight
medium5.5

CVE-2022-4008

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service

Impact

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service

Affected products

VendorProductAffected versions
OctopusOctopus Server
from 0.9 before 2022.3.11043
from 2022.4.791 before 2022.4.8401

Weakness classification

References