Vulnerabilities > Octopus > Octopus Server > 2022.3.10594

DATE CVE VULNERABILITY TITLE RISK
2023-01-03 CVE-2022-3614 Open Redirect vulnerability in Octopus Server
In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation.
network
low complexity
octopus CWE-601
6.1
6.1
2023-01-03 CVE-2022-3460 Improper Cross-boundary Removal of Sensitive Data vulnerability in Octopus Server
In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed in variable preview.
network
low complexity
octopus CWE-212
7.5
7.5