PT-2022-14169
CVE-2022-1881
·
تاريخ النشر
2022-07-15
·
تاريخ التحديث
2022-07-27
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Octopus Server (affected versions not specified)
Description
An Insecure Direct Object Reference issue exists, allowing users to download Project Exports from projects they do not have permissions to access. This issue only affects projects within the same Space.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾