CVE-2025-0525: Infoleak
In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a target file. This could provide an adversary with information that may aid in further attacks against the server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0525?
CVE-2025-0525 is considered a medium severity vulnerability due to its potential to aid adversaries in exploiting the affected Octopus Server.
How do I fix CVE-2025-0525?
To fix CVE-2025-0525, update Octopus Server to the latest version that addresses this vulnerability.
What impact does CVE-2025-0525 have on Octopus Server?
CVE-2025-0525 could allow an attacker to identify the existence of sensitive files, potentially leading to further attacks.
Which versions of Octopus Server are affected by CVE-2025-0525?
CVE-2025-0525 affects certain versions of Octopus Server prior to the security patches released in response to the vulnerability.
How can I determine if my Octopus Server is vulnerable to CVE-2025-0525?
To determine if your Octopus Server is vulnerable to CVE-2025-0525, check its version against the vendor's advisories for known affected versions.