CVE-2022-29890

Published: Jul 15, 2022

Modified: Aug 3, 2024

PUBLISHED

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.

Vendor	Product	Versions
Octopus Deploy	Octopus Server	affected `2019.7.0 - < unspecified` affected `unspecified - < 2021.3.13021` affected `2022.1.2121 - < unspecified` affected `unspecified - < 2022.1.2894` affected `2022.2.6729 - < unspecified` +3 more versions

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.