1127 matches found
CVE-2024-4226
It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions. This functionality was removed in versions of Octopus Server after the fixed versions listed...
CVE-2024-4226
It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions. This functionality was removed in versions of Octopus Server after the fixed versions listed...
CVE-2024-4226
It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions. This functionality was removed in versions of Octopus Server after the fixed versions listed...
CVE-2024-4226
It was identified that in certain versions of Octopus Server, that a user created with no permissions could view all users, user roles and permissions. This functionality was removed in versions of Octopus Server after the fixed versions listed...
Octopus Server 安全漏洞
Octopus Server is an automated deployment platform. A security vulnerability exists in Octopus Server versions prior to 2022.2.7934 and prior to 2022.3.9163, which stems from the ability of an unauthorized created user to view all users, user roles, and permissions...
PT-2024-29811 · Unknown · Octopus Server
Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: A user created with no permissions could view all users, user roles, and permissions in certain versions of Octopus Server. This functionality was removed in versions of Octopus Serv...
Octopus Server 安全漏洞
Octopus Server is an automated deployment platform. A security vulnerability exists in Octopus Server versions prior to 2024.1.12401, which stems from the possibility that API keys may be logged in plaintext in audit log files...
Octopus Server 安全漏洞
Octopus Server is an automated deployment platform. A security vulnerability exists in Octopus Server versions prior to 2024.1.12087, which stems from the presence of a race condition that allows privilege escalation in certain configurations...
CVE-2024-0890
A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2024-0890
A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2024-0891
A vulnerability was found in hongmaple octopus 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument description with the input alertdocument.cookie leads to cross site scripting. The attack can be launched remotely...
CVE-2024-0891
A vulnerability was found in hongmaple octopus 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument description with the input alertdocument.cookie leads to cross site scripting. The attack can be launched remotely...
Cross site scripting
A vulnerability was found in hongmaple octopus 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument description with the input alertdocument.cookie leads to cross site scripting. The attack can be launched remotely...
Sql injection
A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2024-0891 hongmaple octopus cross site scripting
A vulnerability was found in hongmaple octopus 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument description with the input alertdocument.cookie leads to cross site scripting. The attack can be launched remotely...
CVE-2024-0891
CVE-2024-0891 corresponds to a cross-site scripting vulnerability in hongmaple octopus 1.0. The issue arises from manipulating the argument named description with a payload like , enabling remote exploitation and potentially exposing user data. Documentation indicates the vulnerability affects an...
CVE-2024-0891 hongmaple octopus cross site scripting
A vulnerability was found in hongmaple octopus 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument description with the input alertdocument.cookie leads to cross site scripting. The attack can be launched remotely...
CVE-2024-0890
Hongmaple Octopus 1.0 contains a SQL injection in the /system/dept/edit function triggered by manipulating the ancestors parameter. The vulnerability is exploitable remotely and can affect confidentiality, integrity, and availability. Public exploit discussion is present in the sources, but the p...
CVE-2024-0890 hongmaple octopus edit sql injection
A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2024-0890 hongmaple octopus edit sql injection
A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...