Octopus Deploy Security Advisories
Home
Advisories icon
2021 2022 2023 2024 2025 2026
Severity Levels
Disclosure Policy

  • Security Advisory 2026-05

    Jun 11, 2026 · Vulnerability/Stored XSS Severity/medium CVSS/5.6

    Stored XSS using artifacts

    Read More

  • Security Advisory 2026-04

    Jun 2, 2026 · Vulnerability/Broken Access Control Severity/medium CVSS/6.0

    Insufficient permission checks on an api endpoint

    Read More

  • Security Advisory 2026-01

    Feb 24, 2026 · Vulnerability/Path Traversal Severity/medium CVSS/5.9

    File Modification/Deletion Path Traversal

    Read More

  • Security Advisory 2025-06

    Mar 25, 2025 · Vulnerability/server-side request forgery Severity/Medium CVSS/5.9

    Server Side Request Forgery (CVE-2025-0539)

    Read More

  • Security Advisory 2025-05

    Feb 10, 2025 · Vulnerability/Denial of Service Severity/Medium CVSS/5.9

    Denial of Service with Backdoor access

    Read More

  • Security Advisory 2025-01

    Jan 23, 2025 · Vulnerability/Incorrect Authorization Severity/medium CVSS/6.9

    Active Directory data can be read using API endpoints without Authentication (CVE-2025-0589)

    Read More

  • Security Advisory 2024-10

    Dec 5, 2024 · Vulnerability/Information disclosure Severity/Medium CVSS/4.9

    Sensitive Variables Exposed in Logs (CVE-2024-12226)

    Read More

  • Security Advisory 2024-06

    Jul 24, 2024 · Vulnerability/Information disclosure Severity/medium CVSS/6.5

    Sensitive Variables exposed in TaskLogs (CVE-2024-6972)

    Read More

  • Security Advisory 2024-04

    May 7, 2024 · Vulnerability/Stored XSS Severity/medium CVSS/4.1

    Stored XSS in Audit Page (CVE-2024-4456)

    Read More

  • Security Advisory 2024-02

    Apr 17, 2024 · Vulnerability/Information exposure Severity/medium CVSS/4.3

    2024-02 - API key disclosed in Octopus Server audit log.

    Read More
    • ««
    • «
    • 1
    • 2
    • 3
    • 4
    • »
    • »»

Recent Security Advisories

  • Security Advisory 2026-05
  • Security Advisory 2026-04
  • Security Advisory 2026-03
  • Security Advisory 2026-02
  • Security Advisory 2026-01
  • Security Advisory 2025-07
  • Security Advisory 2025-06
  • Security Advisory 2025-05

Products

OCTOPUS SERVER 65 OCTOPUS TENTACLE 4 OCTOPUS DEPLOY TEAMCITY PLUGIN 3 OCTOPUS JAVA SDK 3 HALIBUT 1 KUBERNETES WORKER AND AGENT 1

Tags

SEVERITY/MEDIUM 39 SEVERITY/LOW 25 SEVERITY/HIGH 12 VULNERABILITY/INFORMATION EXPOSURE 7 VULNERABILITY/BROKEN ACCESS CONTROL 6 VULNERABILITY/VULNERABLE-DEPENDENCY 6 CVSS/6.5 5 VULNERABILITY/CLEAR-TEXT-STORAGE-OF-SENSITIVE-VALUE 5 VULNERABILITY/STORED XSS 5 CVSS/2.3 4 CVSS/5.9 4 CVSS/5.5 3 CVSS/5.7 3 CVSS/6.4 3
All Tags
CVSS/1.81 CVSS/2.22 CVSS/2.34 CVSS/2.41 CVSS/2.51 CVSS/2.62 CVSS/3.01 CVSS/3.12 CVSS/3.41 CVSS/3.52 CVSS/3.61 CVSS/3.81 CVSS/3.91 CVSS/4.12 CVSS/4.21 CVSS/4.32 CVSS/4.91 CVSS/5.31 CVSS/5.41 CVSS/5.53 CVSS/5.61 CVSS/5.73 CVSS/5.94 CVSS/6.01 CVSS/6.32 CVSS/6.43 CVSS/6.55 CVSS/6.83 CVSS/6.91 CVSS/7.11 CVSS/7.31 CVSS/8.01 CVSS/8.71 CVSS/8.81 CVSS/9.91 SEVERITY/CRITICAL1 SEVERITY/HIGH12 SEVERITY/LOW25 SEVERITY/MEDIUM39 VULNERABILITY/ABNORMAL INVITE CODE FUNCTIONALITY1 VULNERABILITY/AUTHENTICATION BYPASS BY CAPTURE-REPLAY1 VULNERABILITY/AUTHENTICATION BYPASS USING AN ALTERNATE PATH OR CHANNEL1 VULNERABILITY/BROKEN ACCESS CONTROL6 VULNERABILITY/CLEAR-TEXT-STORAGE-OF-SENSITIVE-VALUE5 VULNERABILITY/CROSS-SITE SCRIPTING (XSS)1 VULNERABILITY/CSRF1 VULNERABILITY/DENIAL OF SERVICE3 VULNERABILITY/DOTNET VULNERABILITY1 VULNERABILITY/ENCRYPTION1 VULNERABILITY/EXPOSURE OF SENSITIVE INFORMATION THROUGH ENVIRONMENTAL VARIABLES1 VULNERABILITY/IMPROPER NEUTRALISATION OF SPECIAL ELEMENTS USED IN A COMMAND1 VULNERABILITY/IMPROPER RESTRICTION OF RENDERED UI LAYERS OR FRAMES1 VULNERABILITY/INCORRECT AUTHORIZATION3 VULNERABILITY/INCORRECT PRIVILEGE ASSIGNMENT3 VULNERABILITY/INFORMATION DISCLOSURE2 VULNERABILITY/INFORMATION EXPOSURE7 VULNERABILITY/INSECURE DIRECT OBJECT REFERENCE (IDOR)1 VULNERABILITY/INSERTION OF SENSITIVE INFORMATION INTO LOG FILE1 VULNERABILITY/INSUFFICIENT SESSION EXPIRATION2 VULNERABILITY/LOCAL-PRIVILEGE-ESCALATION3 VULNERABILITY/LOGGING1 VULNERABILITY/OBSERVABLE DISCREPANCY1 VULNERABILITY/OPEN-REDIRECT1 VULNERABILITY/PATH TRAVERSAL2 VULNERABILITY/PRIVILEGE-ESCALATION1 VULNERABILITY/RATE LIMIT BYPASS1 VULNERABILITY/REGEX DENIAL OF SERVICE3 VULNERABILITY/REMOTE-CODE-EXECUTION3 VULNERABILITY/SENSITIVE VARIABLE EXPOSURE1 VULNERABILITY/SERVER-SIDE REQUEST FORGERY2 VULNERABILITY/SERVER-SIDE REQUEST FORGERY (SSRF)1 VULNERABILITY/SQL-INJECTION2 VULNERABILITY/STORED XSS5 VULNERABILITY/VARIABLE SECRET EXPOSURE1 VULNERABILITY/VULNERABLE-DEPENDENCY6
[A~Z][0~9]
Octopus Deploy Security Advisories

Copyright   OCTOPUS DEPLOY SECURITY ADVISORIES. All Rights Reserved