description: When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users. It was possible to bypass this restriction of validity to create extra user accounts above the initial number of invited users.
problem types: User invitation limit in Octopus Server can be exceeded
affected:
{
product: Octopus Server
vendor: Octopus Deploy
versions:
lessThan: unspecified, status: affected, version: 0.9, versionType: custom
lessThan: 2021.3.12533, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: affected, version: 2022.1.0, versionType: custom
lessThan: 2022.1.53, status: affected, version: unspecified, versionType: custom
}