← All advisories

Medium severity5.5NVD Advisory· Published May 10, 2023· Updated Jun 17, 2026

CVE-2022-4008

CVE-2022-4008

Description

In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Octopus/Server
cpe:2.3:a:octopus:octopus_server:*:*:*:*:*:*:*:*
Range: >=0.9,<2022.3.11043
Octopus/Octopusdeployllm-fuzzy
Octopus Deploy/Octopus Tentaclev5
Range: 0.9

Patches

Vulnerability mechanics

References

1

advisories.octopus.com/post/2023/sa2023-08/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.