Total vulnerabilities in the database
In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation.
| Software | From | Fixed in |
|---|---|---|
| octopus / octopus_server | 2022.4 | 2022.4.8063 |
| octopus / octopus_server | 3.5 | 2022.3.10750 |