CVE-2022-2782 Information

Description

In affected versions of Octopus Server it is possible for a session token to be valid indefinitely due to improper validation of the session token parameters.

Reference

https://advisories.octopus.com/post/2022/sa2022-21/