7.5
CVE-2022-2049
- EPSS 0.48%
- Veröffentlicht 19.08.2022 09:15:08
- Zuletzt bearbeitet 21.11.2024 07:00:14
- Quelle security@octopus.com
- CVE-Watchlists
- Unerledigt
LoginIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Octopus ≫ Octopus Server Version >= 0.9 <= 0.9.620.4
Octopus ≫ Octopus Server Version >= 1.0 <= 1.6.3.1723
Octopus ≫ Octopus Server Version >= 2.0 <= 2.6.5
Octopus ≫ Octopus Server Version >= 3.0.0 <= 3.17.14
Octopus ≫ Octopus Server Version >= 4.0.4 <= 4.1.10
Octopus ≫ Octopus Server Version >= 2018.1.0 <= 2018.12.1
Octopus ≫ Octopus Server Version >= 2019.1.0 <= 2019.13.7
Octopus ≫ Octopus Server Version >= 2020.1.0 <= 2020.6.5449
Octopus ≫ Octopus Server Version >= 2021.1.6959 <= 2021.3.13021
Octopus ≫ Octopus Server Version >= 2022.1.0 < 2022.1.2894
Octopus ≫ Octopus Server Version >= 2022.2.6729 < 2022.2.6872
Octopus ≫ Octopus Server Version >= 2022.3.348 < 2022.3.4953
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.48% | 0.642 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|