← CVE Intelligence

CVE-2022-2528

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages.

Affected (CNA)

Vendor / productVersions
Octopus Deploy / Octopus Serveraffected 3.0 before unspecified; affected unspecified before 2022.1.3106; affected 2022.2.6729 before unspecified; affected unspecified before 2022.2.7718; affected 2022.3.348 before unspecified; affected unspecified before 2022.3.7782

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.