← CVE Intelligence

CVE-2025-0526

Octopus Deploy / Octopus Server PUBLISHED

Description (CNA)

In affected versions of Octopus Deploy it was possible to upload files to unexpected locations on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows.

Affected (CNA)

Vendor / productVersions
Octopus Deploy / Octopus Serveraffected 2022.4.791 before 2024.3.13097; affected 2024.4.401 before 2024.4.7091

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.