CVE-2022-1881

MÉDIO 5.3CVE-2022-1881 · Published 15/07/2022 · updated 17/06/2026

Em resumo

CVE-2022-1881 é uma vulnerabilidade MÉDIO (CVSS 5.3) que afeta octopus server (octopus).
Chance de exploração nos próximos 30 dias (EPSS): 0.56%, maior que 46.8% das vulnerabilidades.
Correção: atualize para 2021.3.13021, 2022.1.2894, 2022.2.6971, 2022.3.2616 ou posterior.

Package	Affected versions	Patched versions
octopus server octopus	`≥ 2021.1.6959, < 2021.3.13021≥ 2022.1.2121, < 2022.1.2894≥ 2022.2.6729, < 2022.2.6971≥ 2022.3.348, < 2022.3.2616`	`2021.3.130212022.1.28942022.2.69712022.3.2616`

Description

In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Project Exports from a Project they do not have permissions to access. This vulnerability only impacts projects within the same Space.

References

advisories.octopus.com/post/2022/sa2022-06 · Vendor Advisory

Mais vulnerabilidades de octopus server

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

octopus server

octopus

≥ 2021.1.6959, < 2021.3.13021≥ 2022.1.2121, < 2022.1.2894≥ 2022.2.6729, < 2022.2.6971≥ 2022.3.348, < 2022.3.2616

2021.3.130212022.1.28942022.2.69712022.3.2616

Mais vulnerabilidades de octopus server

Ver tudo →