Vulnerabilities > Octopus > Octopus Server > 2021.2.7899

DATE CVE VULNERABILITY TITLE RISK
2022-08-19 CVE-2022-1901 Improper Privilege Management vulnerability in Octopus Server
In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview.
network
low complexity
octopus CWE-269
5.3
5.3
2022-02-07 CVE-2022-23184 Open Redirect vulnerability in Octopus Deploy
In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.
network
octopus CWE-601
5.8
5.8