Skip to content
OpenAdvisories
Low · 2.2 CVE-2024-4811 EUVD-2024-44565GHSA-fhff-r739-p363

In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restricted project artifa…

Published Jul 25, 2024 · Updated Jan 16, 2025 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restricted project artifacts.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 2023.1 – < 2023.4.8608, 2024.1 – < 2024.1.12759, 2024.2 – < 2024.2.9193 2023.4.8608

Advisories 1

References