Total vulnerabilities in the database
In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token
| Software | From | Fixed in |
|---|---|---|
| octopus / octopus_server | 2022.3.348 | 2022.3.10586 |
| octopus / octopus_server | 2022.2.6729 | 2022.2.7897 |
| octopus / octopus_server | 3.12.0 | 2022.1.3154 |