CVE-2022-2721: Octopus Server

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

In affected versions of Octopus Server it is possible for target discovery to print certain values marked as sensitive to log files in plaint-text in when verbose logging is enabled.

Affected products

• Octopus Octopus Server: from 2022.2.6729, before 2022.2.7965 (fixed in 2022.2.7965); from 2022.3.348, before 2022.3.9163 (fixed in 2022.3.9163)

Published 2022-11-25. Last modified 2026-06-17.