CVE-2022-2049

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
Aug 19, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-204907.8In multiple functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. ThisCVE-2022-204917.8In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. CVE-2022-204927.8In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource exhaustion. This couCVE-2022-204937.8In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to loCVE-2022-204945.5In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could lead to local denialCVE-2022-204957.8In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility service due to a logic CVE-2022-204965.5In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to lCVE-2022-204974.6In updatePublicMode of NotificationLockscreenUserManagerImpl.java, there is a possible way to reveal sensitive notifications on the lockscreCVE-2022-204984.4In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inCVE-2022-204995.5In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial CVE-2022-20504.8The WP-Paginate WordPress plugin before 2.1.9 does not escape one of its settings, which could allow high privilege users to perform Stored CVE-2022-205005.5In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead to local denial of s
CVE-2022-2049: High severity, CVSS 7.5 | Vulnix