| Package | Affected versions | Patched versions |
|---|---|---|
| octopus server | ≥ 2022.3.348, < 2022.3.10405≥ 2022.4.791, < 2022.4.1371≥ 3.0, < 2022.2.8277 | 2022.3.104052022.4.13712022.2.8277 |
In affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null bytes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free