| Package | Affected versions | Patched versions |
|---|---|---|
| octopus server | ≥ 2021.1.6959, < 2021.3.13021≥ 2022.1.2121, < 2022.1.2894≥ 2022.2.6729, < 2022.2.6971≥ 2022.3.348, < 2022.3.2616 | 2021.3.130212022.1.28942022.2.69712022.3.2616 |
In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Project Exports from a Project they do not have permissions to access. This vulnerability only impacts projects within the same Space.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free