2023-05-10 10:00:27 +02:00
|
|
|
{
|
|
|
|
|
"id": "CVE-2022-4008",
|
|
|
|
|
"sourceIdentifier": "security@octopus.com",
|
|
|
|
|
"published": "2023-05-10T06:15:09.000",
|
2023-05-10 16:00:27 +02:00
|
|
|
"lastModified": "2023-05-10T13:06:16.563",
|
|
|
|
|
"vulnStatus": "Awaiting Analysis",
|
2023-05-10 10:00:27 +02:00
|
|
|
"descriptions": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "en",
|
|
|
|
|
"value": "In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"metrics": {},
|
|
|
|
|
"references": [
|
|
|
|
|
{
|
|
|
|
|
"url": "https://advisories.octopus.com/post/2023/sa2023-08/",
|
|
|
|
|
"source": "security@octopus.com"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
