CVE-2024-4456

In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting payload on the audit page...

CVE-2024-4456

CVE-2024-4456 affects Octopus Server. The vulnerability enables embedding a Cross-Site Scripting payload on the audit page for certain access levels. The connected sources do not provide a concrete root cause; they consistently reference an XSS on the audit page in affected Octopus Server release...