CVE-2021-31820

7.5 highEPSS 0.6%

High (7.5) in octopus octopus server. EPSS 0.6% chance of exploitation in the next 30 days.

In Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured with authentication, the password is shown in plaintext in the UI.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2021-08-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

octopus:octopus_server

References

https://advisories.octopus.com/adv/2021-07---Proxy-Password-Stored-in-Plaintext-%28CVE-2021-31820%29.2193063986.html
https://advisories.octopus.com/adv/2021-07---Proxy-Password-Stored-in-Plaintext-%28CVE-2021-31820%29.2193063986.html

Check your stack JSON