| Package | Affected versions | Patched versions |
|---|---|---|
| octopus deploy | ≥ 3.3.0, ≤ 2019.10.4 |
In Octopus Deploy 3.3.0 through 2019.10.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted package, triggering an exception that exposes underlying operating system details.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free