Octopus Deploy Security Advisories
Home
Advisories icon
2021 2022
Severity Levels
Disclosure Policy

  • Security Advisory 2022-13

    Sep 9, 2022 · Vulnerability/Broken access control Severity/medium CVSS/6.4

    Service Account with FeedView permission can upload to built-in feed after re-indexing packages (CVE-2022-2528)

    Read More

  • Security Advisory 2022-08

    Jul 18, 2022 · Vulnerability/Logging Severity/medium CVSS/6.4

    Lack of auditing and logging for artifacts in Octopus Server (CVE-2022-30532)

    Read More

  • Security Advisory 2022-03

    May 4, 2022 · Vulnerability/Broken-Access-Control Severity/medium CVSS/6.4

    Broken access control in API for projects using Git VCS (CVE-2022-1502)

    Read More

Recent Security Advisories

  • Security Advisory 2022-13
  • Security Advisory 2022-12
  • Security Advisory 2022-11
  • Security Advisory 2022-10
  • Security Advisory 2022-09
  • Security Advisory 2022-08
  • Security Advisory 2022-07
  • Security Advisory 2022-06

Products

OCTOPUS-SERVER 20 OCTOPUS-DEPLOY-TEAMCITY-PLUGIN 3 OCTOPUS-JAVA-SDK 3 OCTOPUS-TENTACLE 3 HALIBUT 1

Tags

SEVERITY/MEDIUM 16 SEVERITY/HIGH 8 SEVERITY/LOW 6 VULNERABILITY/VULNERABLE-DEPENDENCY 6 VULNERABILITY/CLEAR-TEXT-STORAGE-OF-SENSITIVE-VALUE 5 CVSS/6.4 3 VULNERABILITY/BROKEN-ACCESS-CONTROL 3 VULNERABILITY/LOCAL-PRIVILEGE-ESCALATION 3 VULNERABILITY/REGEX-DENIAL-OF-SERVICE 3 VULNERABILITY/REMOTE-CODE-EXECUTION 3 CVSS/6.5 2 CVSS/6.8 2 CVSS/3.4 1 CVSS/4.3 1
All Tags
CVSS/3.41 CVSS/4.31 CVSS/5.31 CVSS/5.71 CVSS/6.31 CVSS/6.43 CVSS/6.52 CVSS/6.82 CVSS/7.11 SEVERITY/HIGH8 SEVERITY/LOW6 SEVERITY/MEDIUM16 VULNERABILITY/ABNORMAL-INVITE-CODE-FUNCTIONALITY1 VULNERABILITY/BROKEN-ACCESS-CONTROL3 VULNERABILITY/CLEAR-TEXT-STORAGE-OF-SENSITIVE-VALUE5 VULNERABILITY/INSECURE-DIRECT-OBJECT-REFERENCE-IDOR1 VULNERABILITY/LOCAL-PRIVILEGE-ESCALATION3 VULNERABILITY/LOGGING1 VULNERABILITY/OPEN-REDIRECT1 VULNERABILITY/REGEX-DENIAL-OF-SERVICE3 VULNERABILITY/REMOTE-CODE-EXECUTION3 VULNERABILITY/SENSITIVE-VARIABLE-EXPOSURE1 VULNERABILITY/SQL-INJECTION1 VULNERABILITY/STORED-XSS1 VULNERABILITY/VULNERABLE-DEPENDENCY6
[A~Z][0~9]
Octopus Deploy Security Advisories

Copyright   OCTOPUS DEPLOY SECURITY ADVISORIES. All Rights Reserved