CVE-2022-2783

In affected versions of Octopus Server it was identified that a session cookie could be used as the CSRF token

Source: CVE-2022-2783