Vulnerability Description
In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Octopus | Octopus Deploy | >= 2022.1.1495, < 2022.1.2647 |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
References
- https://advisories.octopus.com/post/2022/sa2022-05/Vendor Advisory
- https://advisories.octopus.com/post/2022/sa2022-05/Vendor Advisory
FAQ
What is CVE-2022-2013?
CVE-2022-2013 is a vulnerability with a CVSS score of 7.5 (HIGH). In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their p...
How severe is CVE-2022-2013?
CVE-2022-2013 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-2013?
Check the references section above for vendor advisories and patch information. Affected products include: Octopus Octopus Deploy, Linux Linux Kernel, Microsoft Windows.