First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-2013

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
Octopus Deploy	Octopus Server	>= 2022.1.1495, < unspecified; >= unspecified, < 2022.1.2647

References

Timeline

Published: Jun 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-201309.8In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to CVE-2022-201317.5In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remot CVE-2022-201324.6In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validati CVE-2022-201337.8In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. This cou CVE-2022-201347.8In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input v CVE-2022-201357.8In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch. This could lead to local escalation of privilege wi CVE-2022-201377.3In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi settings due to a missing CVE-2022-201387.8In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGED_PROFI CVE-2022-20145.4Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.CVE-2022-201409.8In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalat CVE-2022-201417.0In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege w CVE-2022-201427.8In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This cou

CVE-2022-2013: High severity, CVSS 7.5 | Vulnix