CVE-2025-0513 — Octopus Deploy / Octopus Server

CVE-2025-0513

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

In affected versions of Octopus Server error messages were handled unsafely on the error page. If an adversary could control any part of the error message they could embed code which may impact the user viewing the error message.

Affected (CNA)

Vendor / product	Versions
Octopus Deploy / Octopus Server	affected 2024.3.164 before 2024.3.12985; affected 2024.4.401 before 2024.4.6962

CWE

No CWE identifiers supplied.

References

https://advisories.octopus.com/post/2024/sa2025-04/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.