Description (CNA)
In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Octopus Deploy / Octopus Server | affected 3.12.0 before unspecified; affected unspecified before 2022.1.3154; affected 2022.2.6729 before unspecified; affected unspecified before 2022.2.7897; affected 2022.3.348 before unspecified; affected unspecified before 2022.3.10586 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.