CVE Database
/

CVE-2022-4009

Back to search

CVE-2022-4009

Published: Mar 16, 2023

Modified: Feb 26, 2025

PUBLISHED

Description

In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation

VendorProductVersions

Octopus Deploy

Octopus Server

affected
3.0.19 - < unspecified
affected
unspecified - < 2022.2.8552
affected
2022.3.348 - < unspecified
affected
unspecified - < 2022.3.10750
affected
2022.4.791 - < unspecified

+2 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now