CVE-2017-11348

Octopus Deploy 3.x pre-3.15.4 is affected. An authenticated user with PackagePush permission can upload a malicious NuGet package that may overwrite other packages or modify system files due to a directory traversal flaw in the PackageId value. Affected component: package upload handling in Octop...