CVE-2022-2258

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected software

VendorProductVersions
Octopus DeployOctopus Server>= 2019.1.0, < unspecified; >= unspecified, < 2022.3.11098; >= 2022.4.791, < unspecified; >= unspecified, < 2022.4.8463; >= 2023.1.4189, < unspecified; >= unspecified, < 2023.1.9672

References

Timeline

Published
Mar 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-225825.5A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed iCVE-2022-225835.5A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, macOS Monterey 12.2, mCVE-2022-225847.8A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, mCVE-2022-225857.5An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixeCVE-2022-225869.8An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.2. A malicious applicatioCVE-2022-225879.8A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.CVE-2022-225885.5A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 15.2.1 and iPadOS 15.2.1. Processing a CVE-2022-225896.1A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, CVE-2022-22594.3In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view tCVE-2022-225908.8A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.CVE-2022-225917.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.2. A malicious application mCVE-2022-225926.5A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari
CVE-2022-2258: Medium severity, CVSS 4.3 | Vulnix