CVE-2022-4008

MEDIUM 5.5CVE-2022-4008 · Published 10/05/2023 · updated 17/06/2026

In short

CVE-2022-4008 is a MEDIUM (CVSS 5.5) vulnerability affecting octopus server (octopus).
Chance of exploitation in the next 30 days (EPSS): 0.18%, higher than 8.0% of all vulnerabilities.
Fix: update to 2022.3.11043, 2022.4.8401 or later.

Package	Affected versions	Patched versions
octopus server octopus	`≥ 0.9, < 2022.3.11043≥ 2022.4.791, < 2022.4.8401`	`2022.3.110432022.4.8401`

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 0.9, < 2022.3.11043≥ 2022.4.791, < 2022.4.8401

2022.3.110432022.4.8401

More vulnerabilities in octopus server

See all →