CVE:CVE-2022-2075
CNNVD:CNNVD-202208-3560
Octopus Deploy是澳大利亚Octopus Deploy公司的一款用于.NET、Java等应用程序开发部署的自动化工具。
Octopus Deploy存在安全漏洞，该漏洞源于针对构建信息请求验证执行正则表达式拒绝服务。
solution:Upgrade octopus octopus_server to a higher version than 0.9.620.4,1.6.3.1723,2.6.5,3.17.14,4.1.10,2018.12.1,2019.13.7,2020.6.5449,2021.3.13021,2022.1.2894,2022.2.6872,2022.3.4953,and avoid the version [0.9,0.9.620.4],[1.0,1.6.3.1723],[2.0,2.6.5],[3.0.0,3.17.14],[4.0.4,4.1.10],[2018.1.0,2018.12.1],[2019.1.0,2019.13.7],[2020.1.0,2020.6.5449],[2021.1.6959,2021.3.13021],[2022.1.0,2022.1.2894),[2022.2.6729,2022.2.6872),[2022.3.348,2022.3.4953)