CVE-2022-2783

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-352

Affected software

VendorProductVersions
Octopus DeployOctopus Server>= 3.12.0, < unspecified; >= unspecified, < 2022.1.3154; >= 2022.2.6729, < unspecified; >= unspecified, < 2022.2.7897; >= 2022.3.348, < unspecified; >= unspecified, < 2022.3.10586

References

Timeline

Published
Oct 6, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-278307.8Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.CVE-2022-278314.4Improper boundary check in sflvd_rdbuf_bits of libsflvextractor prior to SMR Apr-2022 Release 1 allows attackers to read out of bounds memorCVE-2022-278323.3Improper boundary check in media.extractor library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via a craftedCVE-2022-278337.8Improper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds write by integer overflow.CVE-2022-278347.0Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform CVE-2022-278357.8Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write.CVE-2022-278367.8Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 alloCVE-2022-278377.8A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows attCVE-2022-278387.8Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege.CVE-2022-278394.0Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab withCVE-2022-278404.4Improper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local attckers to delete arbitrary files as SamsunCVE-2022-278414.3Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running
CVE-2022-2783: Medium severity, CVSS 5.3 | Vulnix