Vulnerability Database

296,147

Total vulnerabilities in the database

CVE-2025-0526

In affected versions of Octopus Deploy it was possible to upload files to unexpected locations on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows.

  • Published: Feb 11, 2025
  • Updated: Jul 3, 2025
  • CVE: CVE-2025-0526
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

No CWE or OWASP classifications available.

Software From Fixed in
octopus / octopus_server 2022.4.791 2024.3.13097
octopus / octopus_server 2024.4.401 2024.4.7091