296,147
Total vulnerabilities in the database
In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allowing a suitably positioned attacker to compromise the account running Octopus Server and potentially the host infrastructure itself.
| Software | From | Fixed in |
|---|---|---|
| octopus / octopus_server | 2.6.0 | 2024.3.13071 |
| octopus / octopus_server | 2024.4.401 | 2024.4.7065 |