Skip to content
OpenAdvisories
Low · 2.3 CVE-2025-0525 EUVD-2025-1734GHSA-vwpq-f3cq-q82w

In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a target file. This could…

Published Feb 11, 2025 · Updated Mar 24, 2025 · Assigned by Octopus

Vendor: Octopus Deploy Product: Octopus Server

Description

In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a target file. This could provide an adversary with information that may aid in further attacks against the server.

Affected products

VendorProductAffectedFixed
Octopus Deploy Octopus Server 2020.6.4592 – < 2024.3.13007, 2024.4.401 – < 2024.4.6995 2024.3.13007

Advisories 1

References