Code injection

2020-10-2217:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.7%

JSON

An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to present itself as a trusted one.

CPENameOperatorVersion
octopus_deployge3.11.13
octopus_deployle2020.4.4

CPE	Name	Operator	Version
	octopus_deploy	ge	3.11.13
	octopus_deploy	le	2020.4.4

References

github.com/OctopusDeploy

github.com/OctopusDeploy/Issues/issues/6637

github.com/OctopusDeploy/Issues/issues/6639

github.com/OctopusDeploy/Issues/issues/6640