QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2021-31818

Back to search

CVE-2021-31818

Published: Jun 17, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API request isn’t parameterised correctly. Exploiting this vulnerability could allow unauthorised access to database tables.

VendorProductVersions

Octopus Deploy

Octopus Server

affected
2018.9.17 - < unspecified
affected
unspecified - < 2020.6.5146
affected
2021.1.7149 - < unspecified
affected
unspecified - < 2021.1.7316

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now