CVE-2023-2247: In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function

0.0 CVSS

Description

In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function

Classification

CVE ID: CVE-2023-2247

CVSS Base Severity: LOW

CVSS Base Score: 0.0

Affected Products

Vendor: Octopus Deploy

Product: Octopus Server

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.06% (probability of being exploited)

EPSS Percentile: 26.2% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://advisories.octopus.com/post/2023/sa2023-07/

Timeline