| Package | Affected versions | Patched versions |
|---|---|---|
| octopus deploy | ≥ 0.9, < 2020.4.229 | 2020.4.229 |
| octopus server | ≥ 2020.5.0, < 2020.5.256 | 2020.5.256 |
When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free