description: In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing packages.
problem types: Broken Access Control
affected:
{
product: Octopus Server
vendor: Octopus Deploy
versions:
lessThan: unspecified, status: affected, version: 3.0, versionType: custom
lessThan: 2022.1.3106, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: affected, version: 2022.2.6729, versionType: custom
lessThan: 2022.2.7718, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: affected, version: 2022.3.348, versionType: custom
lessThan: 2022.3.7782, status: affected, version: unspecified, versionType: custom
}