CVE-2021-31818

概要

参考情報

• advisories.octopus.com/adv/2021-04---SQL-Injection-in-the-Events-REST-API-%28CVE-2021-31818%29.2013233248.html

server のその他の脆弱性

• CVE-2022-1502中 4.3Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users wi…
• CVE-2021-31817高 7.5When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written…
• CVE-2021-31816高 7.5When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written…
• CVE-2021-30183高 7.5Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export …
• CVE-2020-16197中 4.3An issue was discovered in Octopus Deploy 3.4. A deployment target can be configured with an Account or Certificate that is outside the scop…