Unrated severityNVD Advisory· Published Jul 15, 2022· Updated Aug 3, 2024
CVE-2022-1881
CVE-2022-1881
Description
In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Project Exports from a Project they do not have permissions to access. This vulnerability only impacts projects within the same Space.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- advisories.octopus.com/post/2022/sa2022-06/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.