CVE:CVE-2022-23184
CNNVD:CNNVD-202202-514
Octopus Server是一个自动化部署平台。
Octopus Server 中存在输入验证错误漏洞，该漏洞源于产品在将HTTP和HTTPS绑定配置到本地主机时，服务器将允许开放重定向。
solution:Upgrade octopus octopus_deploy to a higher version than 4.1.10,2020.1.1,and avoid the version [0.9,4.1.10],[2018.1.0,2020.1.1]; Upgrade octopus octopus_server to a higher version than 2021.2.8011,2021.3.11057,and avoid the version [2021.2.0,2021.2.8011),[2021.3.0,2021.3.11057)