CVE-2022-2528

Published: Sep 9, 2022

Modified: Aug 3, 2024

PUBLISHED

In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages.

Vendor	Product	Versions
Octopus Deploy	Octopus Server	affected `3.0 - < unspecified` affected `unspecified - < 2022.1.3106` affected `2022.2.6729 - < unspecified` affected `unspecified - < 2022.2.7718` affected `2022.3.348 - < unspecified` +1 more versions

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.