Cross site scripting

2017-11-1403:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

31.3%

JSON

Cross-site scripting (XSS) vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 (fixed in 3.13.7) allows remote attackers to inject arbitrary web script or HTML via the Variable Set Name parameter.

CPENameOperatorVersion
octopus_deployge3.4.0
octopus_deployle3.13.6

CPE	Name	Operator	Version
	octopus_deploy	ge	3.4.0
	octopus_deploy	le	3.13.6

References

github.com/OctopusDeploy/Issues/issues/3919

0.001 Low

EPSS

Percentile

31.3%

JSON

Related for PRION:CVE-2017-16810