2020.5.8

DATE	CVE	VULNERABILITY TITLE	RISK
2021-10-07	CVE-2021-26556	Untrusted Search Path vulnerability in Octopus Deploy When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access. local low complexity octopus CWE-426	7.8
2021-08-18	CVE-2021-31820	Cleartext Storage of Sensitive Information vulnerability in Octopus Server In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI. network low complexity octopus CWE-312	7.5