Skip to content
OpenAdvisories
Medium · 4.1 CVE-2024-4456 EUVD-2024-44564GHSA-594v-v6mq-rw7x

In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting payload on the audit page.

Published May 8, 2024 · Updated Jan 16, 2025 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting payload on the audit page.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 3.0 – < 2023.3.13361, 2023.4.296 – < 2023.4.8338, 2024.1.437 – < 2024.1.11127 2023.3.13361

Advisories 1

References