Octopus Deploy Privilege Escalation Vulnerability

In Octopus, an authenticated user who was explicitly granted the permission to invite new users aka UserInvite can invite users to teams with escalated privileges. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CVE-2017-15611

CVE-2017-15611 affects Octopus Deploy prior to 3.17.7. An authenticated user with the explicit UserInvite permission can invite users to teams with escalated privileges, enabling privilege escalation within the deployment platform. The vulnerability is documented across multiple sources (NVD entr...