Vendor
Octopus Deploy
87 known vulnerabilities.
Products
Octopus Server 79
Octopus Tentacle 4
Codefresh 1
OctopusDSC 1
Kubernetes Worker or Kubernetes Agent 1
Halibut 1
Octopus Deploy < 2022.4.8377 0
Octopus Deploy 0
Octopus Deploy < 2022.3.10750 0
Octopus Deploy < 2022.4.8221 0
Octopus Deploy < 2022.2.8552 0
Octopus Deploy < 2022.3.11098 0
Octopus Deploy < 2022.4.8463 0
Octopus Deploy < 2023.1.9672 0
Octopus Deploy < 2023.2.2394 0
Octopus Deploy < 2023.1.10235 0
Octopus Deploy < 2023.1.9879 0
Octopus Deploy < 2023.2.8159 0
Octopus Deploy < 2022.4.8319 0
Octopus Deploy < 2023.1.4189 0
Octopus Deploy < 2022.3.11043 0
Octopus Deploy < 2022.4.8401 0
Octopus Deploy < 2023.1.9794 0
Octopus Deploy < 2022.4.8332 0
Octopus Deploy < 2022.3.10957 0
Octopus Deploy < 2023.1.11942 0
Octopus Deploy < 2023.2.13151 0
Octopus Deploy < 2023.3.5049 0
Octopus Deploy < 2022.4.9997 0
Octopus Deploy < 2023.2.10545 0
23 results · Clear filters · Feed
-
High 8.7
In affected versions of Octopus Server, incorrect validation of changes a user made to their own LDAP identity allowed …
-
High 8.7
In affected versions of Octopus Server, incorrect validation of the external identity linked to a newly registered user…
-
High 8.7
In affected versions of Octopus Server, insufficient validation of custom claims on OIDC accounts allowed a user with p…
-
High 7.7
In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to…
-
High 7.1
In affected versions of Octopus Server, incorrect validation of the permissions assigned to a user that would allow the…
-
High 8.7
In affected versions of Octopus Server, insufficient integrity protection of authentication cookies, combined with inco…
-
High 8.6
In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full …
-
High 7.7
In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. W…
-
High 8.7
In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in…
-
High 8.7
In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly pr…
-
High 8.7
In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protecti…
-
High 7.1
In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an…
-
High 8.7
In affected versions of Octopus Server, an authenticated user with permissions to edit an Environment or Project can se…
-
High 8.7
In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a pa…
-
High 7.2
In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a …
-
High 8.6
In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin pe…
-
High 7.1
In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed…
-
High 8.8
A race condition was identified through which privilege escalation was possible in certain configurations.
-
High 8.8
In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation
-
High 7.5
In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Ser…
-
High 7.5
In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become …
-
High 7.5
In affected versions of Octopus Server it is possible for target discovery to print certain values marked as sensitive …
-
High 8.1
In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to i…