CVE-2022-2883

HIGH 7.5CVE-2022-2883 · Published 22/02/2023 · updated 17/06/2026

In short

CVE-2022-2883 is a HIGH (CVSS 7.5) vulnerability affecting octopus server (octopus).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.2% of all vulnerabilities.
Fix: update to 2022.4.8401, 2022.3.11043 or later.

Package	Affected versions	Patched versions
octopus server octopus	`≥ 2022.4.0, < 2022.4.8401< 2022.3.11043`	`2022.4.84012022.3.11043`

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 2022.4.0, < 2022.4.8401< 2022.3.11043

2022.4.84012022.3.11043

More vulnerabilities in octopus server

See all →