| Package | Affected versions | Patched versions |
|---|---|---|
| octopus server | ≥ 2018.1.0, ≤ 2021.3.13021≥ 2022.1.0, < 2022.1.3106≥ 2022.2.6729, < 2022.2.7718≥ 2022.3.348, < 2022.3.7782≥ 3.0.0, ≤ 4.1.10 | 2022.1.31062022.2.77182022.3.7782 |
In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free