Design/Logic Flaw

2020-10-2618:15:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.7%

In Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modified HTTP Host header.

CPENameOperatorVersion
octopus_deployge2019.8.2
octopus_deployle2020.4.2

CPE	Name	Operator	Version
	octopus_deploy	ge	2019.8.2
	octopus_deploy	le	2020.4.2

References

github.com/OctopusDeploy

github.com/OctopusDeploy/Issues/issues/6622

github.com/OctopusDeploy/Issues/issues/6627