Total vulnerabilities in the database
In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Project Exports from a Project they do not have permissions to access. This vulnerability only impacts projects within the same Space.
| Software | From | Fixed in |
|---|---|---|
| octopus / octopus_server | 2021.1.6959 | 2021.3.13021 |
| octopus / octopus_server | 2022.1.2121 | 2022.1.2894 |
| octopus / octopus_server | 2022.3.348 | 2022.3.2616 |
| octopus / octopus_server | 2022.2.6729 | 2022.2.6971 |