CVE-2021-31820

—

CVSS 3.1

7.5 high

EPSS

<1%p47

Published

Aug 18, 2021 (Aug 18, 2021)

Modified

Jun 17, 2026

Description

In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI.

Vendors: octopus
Products: octopus server
Weakness: CWE-312
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.