CVE-2022-4870

概要

参考情報

• advisories.octopus.com/post/2023/sa2023-09 · Vendor Advisory

octopus server のその他の脆弱性

• CVE-2026-14163高 7.5In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the deployment va…
• CVE-2026-12702中 4.9In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deploymen…
• CVE-2026-4881中 6.5In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated user being able to make server…
• CVE-2026-3237中 4.3In affected versions of Octopus Server it was possible for a low privileged user to manipulate an API request to change the signing key expi…
• CVE-2026-3236中 4.3In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting in the new API key ha…