| Package | Affected versions | Patched versions |
|---|---|---|
| octopus server | ≥ 2022.3.0, < 2022.3.10586≥ 2022.4.0, < 2022.4.2898< 2022.2.8351 | 2022.3.105862022.4.28982022.2.8351 |
In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free