Octopus Deploy Security Advisories
Home
Advisories icon
2021 2022 2023 2024
Severity Levels
Disclosure Policy

  • Security Advisory 2022-07

    Jul 15, 2022 · Vulnerability/Stored XSS Severity/medium CVSS/6.8

    Stored Cross-Site Scripting (XSS) in Octopus Server help sidebar (CVE-2022-29890)

    Read More

  • Security Advisory 2022-06

    Jul 15, 2022 · Vulnerability/Insecure Direct Object Reference (IDOR) Severity/medium CVSS/6.5

    Insecure Direct Object Reference (IDOR) of Project Exports in Octopus Server (CVE-2022-1881)

    Read More

  • Security Advisory 2022-05

    Jun 13, 2022 · Vulnerability/Broken Access Control Severity/medium CVSS/5.7

    Script Console Access via Private Space in Octopus Server (CVE-2022-2013)

    Read More

  • Security Advisory 2022-04

    May 19, 2022 · Vulnerability/Abnormal invite code functionality Severity/Low CVSS/3.4

    User invitation limit in Octopus Server can be exceeded (CVE-2022-1670)

    Read More

  • Security Advisory 2022-03

    May 4, 2022 · Vulnerability/Broken-Access-Control Severity/medium CVSS/6.4

    Broken access control in API for projects using Git VCS (CVE-2022-1502)

    Read More

  • Security Advisory 2022-02

    Feb 7, 2022 · Vulnerability/Open-Redirect Severity/medium CVSS/4.3

    Open Redirect Vulnerability in Octopus Server (CVE-2022-23184)

    Read More

  • Security Advisory 2022-01

    Jan 19, 2022 · Vulnerability/Clear-Text-Storage-Of-Sensitive-Value Severity/medium CVSS/6.3

    Cleartext Storage of Sensitive Information in Octopus Tentacle Windows Docker image (CVE-2021-31821)

    Read More

  • Security Advisory 2021-17

    Dec 20, 2021 · Vulnerability/Vulnerable-Dependency Severity/Low

    Octopus Java Client SDK log4j 2.16.0 dependency (CVE-2021-45105)

    Read More

  • Security Advisory 2021-16

    Dec 20, 2021 · Vulnerability/Vulnerable-Dependency Severity/Low

    Octopus Deploy TeamCity Plugin log4j 2.16.0 dependency (CVE-2021-45105)

    Read More

  • Security Advisory 2021-15

    Dec 15, 2021 · Vulnerability/Vulnerable-Dependency Severity/Low

    Octopus Java Client SDK log4j 2.15.0 dependency (CVE-2021-45046)

    Read More
    • ««
    • «
    • 3
    • 4
    • 5
    • 6
    • 7
    • »
    • »»

Recent Security Advisories

  • Security Advisory 2024-09
  • Security Advisory 2024-08
  • Security Advisory 2024-07
  • Security Advisory 2024-06
  • Security Advisory 2024-05
  • Security Advisory 2024-04
  • Security Advisory 2024-03
  • Security Advisory 2024-02

Products

OCTOPUS SERVER 53 OCTOPUS TENTACLE 4 OCTOPUS DEPLOY TEAMCITY PLUGIN 3 OCTOPUS JAVA SDK 3 HALIBUT 1

Tags

SEVERITY/MEDIUM 32 SEVERITY/LOW 20 SEVERITY/HIGH 12 VULNERABILITY/INFORMATION EXPOSURE 7 VULNERABILITY/VULNERABLE-DEPENDENCY 6 CVSS/6.5 5 VULNERABILITY/BROKEN ACCESS CONTROL 5 VULNERABILITY/CLEAR-TEXT-STORAGE-OF-SENSITIVE-VALUE 5 CVSS/5.5 3 CVSS/5.7 3 CVSS/6.4 3 CVSS/6.8 3 VULNERABILITY/INCORRECT PRIVILEGE ASSIGNMENT 3 VULNERABILITY/LOCAL-PRIVILEGE-ESCALATION 3
All Tags
CVSS/2.22 CVSS/2.41 CVSS/2.51 CVSS/2.62 CVSS/3.01 CVSS/3.12 CVSS/3.41 CVSS/3.52 CVSS/3.61 CVSS/3.81 CVSS/3.91 CVSS/4.12 CVSS/4.21 CVSS/4.32 CVSS/5.31 CVSS/5.41 CVSS/5.53 CVSS/5.73 CVSS/5.91 CVSS/6.32 CVSS/6.43 CVSS/6.55 CVSS/6.83 CVSS/7.11 CVSS/7.31 CVSS/8.01 CVSS/8.71 CVSS/8.81 SEVERITY/HIGH12 SEVERITY/LOW20 SEVERITY/MEDIUM32 VULNERABILITY/ABNORMAL INVITE CODE FUNCTIONALITY1 VULNERABILITY/AUTHENTICATION BYPASS BY CAPTURE-REPLAY1 VULNERABILITY/AUTHENTICATION BYPASS USING AN ALTERNATE PATH OR CHANNEL1 VULNERABILITY/BROKEN ACCESS CONTROL5 VULNERABILITY/CLEAR-TEXT-STORAGE-OF-SENSITIVE-VALUE5 VULNERABILITY/CROSS-SITE SCRIPTING (XSS)1 VULNERABILITY/CSRF1 VULNERABILITY/DENIAL OF SERVICE2 VULNERABILITY/ENCRYPTION1 VULNERABILITY/EXPOSURE OF SENSITIVE INFORMATION THROUGH ENVIRONMENTAL VARIABLES1 VULNERABILITY/IMPROPER NEUTRALISATION OF SPECIAL ELEMENTS USED IN A COMMAND1 VULNERABILITY/IMPROPER RESTRICTION OF RENDERED UI LAYERS OR FRAMES1 VULNERABILITY/INCORRECT PRIVILEGE ASSIGNMENT3 VULNERABILITY/INFORMATION DISCLOSURE1 VULNERABILITY/INFORMATION EXPOSURE7 VULNERABILITY/INSECURE DIRECT OBJECT REFERENCE (IDOR)1 VULNERABILITY/INSERTION OF SENSITIVE INFORMATION INTO LOG FILE1 VULNERABILITY/INSUFFICIENT SESSION EXPIRATION2 VULNERABILITY/LOCAL-PRIVILEGE-ESCALATION3 VULNERABILITY/LOGGING1 VULNERABILITY/OPEN-REDIRECT1 VULNERABILITY/PRIVILEGE-ESCALATION1 VULNERABILITY/RATE LIMIT BYPASS1 VULNERABILITY/REGEX DENIAL OF SERVICE3 VULNERABILITY/REMOTE-CODE-EXECUTION3 VULNERABILITY/SENSITIVE VARIABLE EXPOSURE1 VULNERABILITY/SERVER-SIDE REQUEST FORGERY1 VULNERABILITY/SERVER-SIDE REQUEST FORGERY (SSRF)1 VULNERABILITY/SQL-INJECTION2 VULNERABILITY/STORED XSS3 VULNERABILITY/VARIABLE SECRET EXPOSURE1 VULNERABILITY/VULNERABLE-DEPENDENCY6
[A~Z][0~9]
Octopus Deploy Security Advisories

Copyright   OCTOPUS DEPLOY SECURITY ADVISORIES. All Rights Reserved