CVE-2022-2783: Octopus Server

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token

Affected products

• Octopus Octopus Server: from 3.12.0, before 2022.1.3154 (fixed in 2022.1.3154); from 2022.2.6729, before 2022.2.7897 (fixed in 2022.2.7897); from 2022.3.348, before 2022.3.10586 (fixed in 2022.3.10586)

Published 2022-10-06. Last modified 2026-06-17.