← Database

CVE-2022-1502

MEDIUM CVSS: 4.3 Published: 2022-05-04 Modified: 2026-06-17

Description

Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users with only ProjectView permissions.

Affected Platforms

Octopus Server

Weakness Type

NVD-CWE-Other

References