PT-2022-18578

CVE-2022-2778

Published

2022-09-30

Updated

2023-08-08

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Octopus Deploy (affected versions not specified)

Description The issue allows bypassing rate limiting on login using null bytes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Researchers

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾