Skip to content
CVE PROGRAM SOURCE RECORD1.8 Low

CVE-2025-0513

In affected versions of Octopus Server error messages were handled unsafely on the error page. If an adversary could control any part of the error message they could embed code whi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Octopus

Description

In affected versions of Octopus Server error messages were handled unsafely on the error page. If an adversary could control any part of the error message they could embed code which may impact the user viewing the error message.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Octopus Deploy Octopus Server

Default version status: unaffected

  • 2024.3.164 to < 2024.3.12985affected
  • 2024.4.401 to < 2024.4.6962affected

References