CVE-2021-31820

HIGH 7.5CVE-2021-31820 · Published 18/08/2021 · updated 17/06/2026

In short

CVE-2021-31820 is a HIGH (CVSS 7.5) vulnerability affecting octopus server (octopus).
Chance of exploitation in the next 30 days (EPSS): 0.61%, higher than 49.3% of all vulnerabilities.
Fix: update to 2021.1.7622, 2020.6.5310 or later.

Package	Affected versions	Patched versions
octopus server octopus	`≥ 2021.1.0, < 2021.1.7622> 2018.8.2, < 2020.6.5310`	`2021.1.76222020.6.5310`

Description

In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI.

References

advisories.octopus.com/adv/2021-07---Proxy-Password-Stored-in-Plaintext-%28CVE-2021-31820%29.2193063986.html

More vulnerabilities in octopus server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

octopus server

octopus

≥ 2021.1.0, < 2021.1.7622> 2018.8.2, < 2020.6.5310

2021.1.76222020.6.5310

More vulnerabilities in octopus server

See all →