| Package | Affected versions | Patched versions |
|---|---|---|
| octopus server | ≥ 0.9, < 2021.3.12533≥ 2022.1.0, < 2022.1.53 | 2021.3.125332022.1.53 |
When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users. It was possible to bypass this restriction of validity to create extra user accounts above the initial number of invited users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free