CVE-2023-2247 - In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function

MEDIUM

In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function

Published May 2, 2023

5.3

MEDIUM

CVSS 3.1

EPSS 0.45%

In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://advisories.octopus.com/post/2023/sa2023-07/		Vendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner Octopus

Published May 2, 2023

Updated Dec 3, 2024

Reserved Apr 24, 2023

Updated Dec 3, 2024

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a