CVE-2021-31818 Vulnerability Details

  /     /     /  

CVE-2021-31818 Metadata Quick Info

CVE Published: 17/06/2021 | CVE Updated: 03/08/2024 | CVE Year: 2021
Source: Octopus | Vendor: Octopus Deploy | Product: Octopus Server
Status : PUBLISHED

---

CVE-2021-31818 Description

Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API request isn’t parameterised correctly. Exploiting this vulnerability could allow unauthorised access to database tables.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: SQL Injection
Source: Octopus Deploy

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).