CVE-2022-29890

MÉDIO 6.1CVE-2022-29890 · Published 15/07/2022 · updated 17/06/2026

Em resumo

CVE-2022-29890 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta octopus server (octopus).
Chance de exploração nos próximos 30 dias (EPSS): 0.47%, maior que 40.4% das vulnerabilidades.
Correção: atualize para 2021.3.13021, 2022.1.2849, 2022.3.2387 ou posterior.

Package	Affected versions	Patched versions
octopus server octopus	`= 2022.2.6729≥ 2019.7.0, < 2021.3.13021≥ 2022.1.2121, < 2022.1.2849≥ 2022.3.348, < 2022.3.2387`	`2021.3.130212022.1.28492022.3.2387`

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 2022.2.6729≥ 2019.7.0, < 2021.3.13021≥ 2022.1.2121, < 2022.1.2849≥ 2022.3.348, < 2022.3.2387

2021.3.130212022.1.28492022.3.2387

Mais vulnerabilidades de octopus server

Ver tudo →