CVE-2022-2013

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-201309.8In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to CVE-2022-201317.5In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remotCVE-2022-201324.6In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validatiCVE-2022-201337.8In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. This couCVE-2022-201347.8In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input vCVE-2022-201357.8In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch. This could lead to local escalation of privilege wiCVE-2022-201377.3In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi settings due to a missingCVE-2022-201387.8In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGED_PROFICVE-2022-20145.4Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.CVE-2022-201409.8In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalatCVE-2022-201417.0In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wCVE-2022-201427.8In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. This cou
CVE-2022-2013: High severity, CVSS 7.5 | Vulnix