CVE-2021-31818

Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API…

published June 17, 2021

CVSS
—
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API request isn’t parameterised correctly. Exploiting this vulnerability could allow unauthorised access to database tables.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00622 · 49.1th percentile
Published
2021-06-17T13:22Z
EPSS history
Timeline
  • 17 JUN 13:22Z
    Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API…
    cvelistv5