Filter
AND
Octopus Octopus ServerIn affected versions of Octopus Deploy it is possible for a low privileged guest user to interact wi…
5.5
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Deploy it is possible to discover network details via error message
5.3
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which resul…
5.5
First published (updated )
Octopus Octopus DeployIn affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable …
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Octopus Octopus ServerIn affected versions of Octopus Deploy it is possible to render user supplied input into the webpage
5.3
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Deploy it is possible for a user to view Tagsets without being expli…
4.3
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Deploy it is possible for a user to view Workerpools without being e…
4.3
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Serv…
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Octopus Octopus ServerIn affected versions of Octopus Server it is possible to reveal the existence of resources in a spac…
5.3
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Server it is possible to reveal information about teams via the API …
6.5
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Server it was identified that when a sensitive value is a substring …
5.3
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Server it was identified that the same encryption process was used f…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Octopus Octopus ServerIn affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user…
4.3
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insu…
6.5
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variabl…
5.3
First published (updated )
Octopus Octopus ServerIn affected versions of Octopus Deploy, there is no logging of changes to artifacts within Octopus D…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Octopus Octopus ServerIn affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists wher…
5.3
First published (updated )
Octopus ServerPermissions were not properly verified in the API on projects using version control in Git. This all…
4.3
First published (updated )
Octopus Octopus DeployIn affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localh…
6.1
First published (updated )
Octopus TentacleWhen the Windows Tentacle docker image starts up it logs all the commands that it runs along with th…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-21270Cleartext Storage of Sensitive Information
6.2
First published (updated )
Octopus Octopus DeployIn Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modif…
6.1
First published (updated )
Octopus Octopus ServerAn issue was discovered in Octopus Deploy 3.4. A deployment target can be configured with an Account…
4.3
First published (updated )
Octopus Octopus DeployIn Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger…
6.5
First published (updated )
Octopus Octopus DeployIn Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not scoped …
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.