← CVE Intelligence

CVE-2024-4456

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting payload on the audit page.

Affected (CNA)

Vendor / productVersions
Octopus Deploy / Octopus Serveraffected 3.0 before 2023.3.13361; affected 2023.4.296 before 2023.4.8338; affected 2024.1.437 before 2024.1.11127

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.