CVE-2021-30183: Octopus Server

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export processes, the password used to encrypt and decrypt sensitive values would be written to the logs in plaintext.

Affected products

• Octopus Server: before 2020.5.329 (fixed in 2020.5.329); from 2020.6.0, before 2020.6.4847 (fixed in 2020.6.4847); from 2021.1.0, before 2021.1.6959 (fixed in 2021.1.6959)

Published 2021-05-14. Last modified 2026-06-17.