description: In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.
problem types: Stored Cross-Site Scripting (XSS)
affected:
{
product: Octopus Server
vendor: Octopus Deploy
versions:
lessThan: unspecified, status: affected, version: 2019.7.0, versionType: custom
lessThan: 2021.3.13021, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: affected, version: 2022.1.2121, versionType: custom
lessThan: 2022.1.2894, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: affected, version: 2022.2.6729, versionType: custom
lessThan: 2022.2.6971, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: affected, version: 2022.3.348, versionType: custom
lessThan: 2022.3.2387, status: affected, version: unspecified, versionType: custom
}