| Package | Affected versions | Patched versions |
|---|---|---|
| octopus server | ≥ 2.6.0, < 2024.3.13071≥ 2024.4.401, < 2024.4.7065 | 2024.3.130712024.4.7065 |
In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allowing a suitably positioned attacker to compromise the account running Octopus Server and potentially the host infrastructure itself.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free