high8.8
CVE-2022-4009
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation
Impact
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Server | from 3.0.19 before 2022.2.8552 from 2022.3.348 before 2022.3.10750 from 2022.4.791 before 2022.4.8319 |