CVE-2022-30532

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

In affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus Deploy.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected software

VendorProductVersions
Octopus DeployOctopus Server>= 0.9, < unspecified; >= unspecified, < 2021.3.13021; >= 2022.1.2121, < unspecified; >= unspecified, < 2022.1.2849; >= 2022.3.348, < unspecified; >= unspecified, < 2022.3.2387

References

Timeline

Published
Jul 19, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-305335.4Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject CVE-2022-305348.8An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364CVE-2022-305356.5In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obtain the secrets avaiCVE-2022-305364.8Authenticated Stored Cross-Site Scripting (XSS) vulnerability in Florent Maillefaud's WP Maintenance plugin <= 6.0.7 at WordPress.CVE-2022-305387.8Out-of-bounds write vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which mCVE-2022-305396.7Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege vCVE-2022-30546.5Insufficient policy enforcement in DevTools in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap coCVE-2022-305407.8The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitraCVE-2022-305419.8An OS command injection vulnerability exists in the XCMD setUPnP functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and CVE-2022-305426.7Improper input validation in the firmware for some Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and Intel(R) Server System CVE-2022-305438.8A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted seCVE-2022-305448.8Cross-Site Request Forgery (CSRF) in MiKa's OSM – OpenStreetMap plugin <= 6.0.1 versions.
CVE-2022-30532: Medium severity, CVSS 5.3 | Vulnix