| Package | Affected versions | Patched versions |
|---|---|---|
| octopus deploy | ≥ 0.9, ≤ 4.1.10≥ 2018.1.0, ≤ 2020.1.1 | |
| octopus server | ≥ 2021.2.0, < 2021.2.8011≥ 2021.3.0, < 2021.3.11057 | 2021.2.80112021.3.11057 |
In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free