CVE-2022-3460: Octopus Server

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become unmasked when viewed in variable preview.

Affected products

• Octopus Octopus Server: from 2018.1.0, before 2022.3.10750 (fixed in 2022.3.10750); from 2022.4, before 2022.4.8063 (fixed in 2022.4.8063)

Published 2023-01-03. Last modified 2026-06-17.