Unscored CVE-2020-27155 EUVD-2020-19679GHSA-cc7m-766r-4r2f

An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to pres…

Published Oct 22, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to present itself as a trusted one.

References

https://github.com/OctopusDeploy
https://github.com/OctopusDeploy/Issues/issues/6637
https://github.com/OctopusDeploy/Issues/issues/6639
https://github.com/OctopusDeploy/Issues/issues/6640