Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-2528

In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages.

Description

In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Octopus Deploy Octopus Server

  • 3.0 to < unspecifiedaffected
  • unspecified to < 2022.1.3106affected
  • 2022.2.6729 to < unspecifiedaffected
  • unspecified to < 2022.2.7718affected
  • 2022.3.348 to < unspecifiedaffected
  • unspecified to < 2022.3.7782affected

References