In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Octopus_server | Octopus | * | 2023.1.9794 (excluding) |
| Octopus_server | Octopus | 2022.4.0 (including) | 2022.4.8332 (excluding) |
| Octopus_server | Octopus | 2023.1.0 (including) | 2023.1.6715 (excluding) |