← Database

CVE-2022-2782

CRITICAL CVSS: 9.1 Published: 2022-10-27 Modified: 2026-06-17

Description

In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters.

Affected Platforms

Octopus Octopus Server

Weakness Type

CWE-613, CWE-613

References