Code injection

2017-10-1908:29:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.4%

JSON

Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations involving Offline Drop Targets.

CPENameOperatorVersion
octopus_deployle3.17.6

CPE	Name	Operator	Version
	octopus_deploy	le	3.17.6

References

github.com/OctopusDeploy/Issues/issues/3868