CVE-2022-2416: Octopus Server

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enumeration/recon of an environment.

Affected products

• Octopus Octopus Server: from 2019.4.0, before 2022.4.9997 (fixed in 2022.4.9997); from 2023.1.4189, before 2023.1.10235 (fixed in 2023.1.10235); from 2023.2.2028, before 2023.2.10545 (fixed in 2023.2.10545)

Published 2023-08-02. Last modified 2026-06-17.