Security Advisory

CVE-2022-1881

5.3
MEDIUM

Vulnerability Description

In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Project Exports from a Project they do not have permissions to access. This vulnerability only impacts projects within the same Space.
Published Date July 15, 2022
Official Source NIST NVD Advisory