← CVE Intelligence

CVE-2022-29890

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.

Affected (CNA)

Vendor / productVersions
Octopus Deploy / Octopus Serveraffected 2019.7.0 before unspecified; affected unspecified before 2021.3.13021; affected 2022.1.2121 before unspecified; affected unspecified before 2022.1.2894; affected 2022.2.6729 before unspecified; affected unspecified before 2022.2.6971; affected 2022.3.348 before unspecified; affected unspecified before 2022.3.2387

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.