Description (CNA)
In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Octopus Deploy / Octopus Server | affected 2019.4.0 before 2022.4.9997; affected 2023.1.0 before 2023.1.10235; affected 2023.2.0 before 2023.2.10545 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.