CVE-2022-23184: Medium severity octopus deploy vulnerability
In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-23184.
What is the severity of CVE-2022-23184?
The severity of CVE-2022-23184 is medium with a CVSS score of 6.1.
Which software versions are affected by CVE-2022-23184?
The affected software versions are Octopus Server versions from 0.9 to 4.1.10, Octopus Server versions from 2018.1.0 to 2020.1.1, Octopus Server versions from 2021.2.0 to 2021.2.8011, and Octopus Server versions from 2021.3.0 to 2021.3.11057.
What is the vulnerability description of CVE-2022-23184?
In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.
How can I fix CVE-2022-23184?
To fix CVE-2022-23184, upgrade Octopus Server to a version that is not affected, as recommended by the vendor.