CVE-2022-1670

When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users

published May 19, 2022

CVSS
—
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users. It was possible to bypass this restriction of validity to create extra user accounts above the initial number of invited users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00852 · 57.8th percentile
Published
2022-05-19T04:25Z
EPSS history
Timeline
  • 19 MAY 04:25Z
    When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users
    cvelistv5