VULNERABILITY INTELLIGENCE
CVE-2021-31818
CVSS score4.3 MEDIUM
EPSS probability0.62%
CISA KEVNot currently listed
Published2021-06-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
Affected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in the Events REST API because user supplied data in the API request isn’t parameterised correctly. Exploiting this vulnerability could allow unauthorised access to database tables.
Weakness classification
- nvd@nist.gov: CWE-89