Description
In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Octopus Deploy | Octopus Server | 2019.4.0 – < 2022.4.9997, 2023.1.0 – < 2023.1.10235, 2023.2.0 – < 2023.2.10545 | 2022.4.9997 |
Advisories 1
- WID-SEC-2023-1893 Octopus Deploy: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 26, 2023