Unrated severityNVD Advisory· Published May 19, 2022· Updated Aug 3, 2024
CVE-2022-1670
CVE-2022-1670
Description
When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users. It was possible to bypass this restriction of validity to create extra user accounts above the initial number of invited users.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- advisories.octopus.com/post/2022/sa2022-04/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.