CVE-2025-0526 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In affected versions of Octopus Deploy it was possible to upload files to unexpected locations on the host using an API endpoint. The field lacked validation wh…
Low CVSS: 2.3

CVE-2025-0526

In affected versions of Octopus Deploy it was possible to upload files to unexpected locations on the host using an API endpoint. The field lacked validation which could potentially result in ways to circumvent expected workflows.
Vendor
Octopus
Product
Octopus Server
CWE
CWE-862
Yayın Tarihi
2025-02-11 11:15:15
Güncelleme
2025-07-02 17:23:30
Source Identifier
security@octopus.com
KEV Date Added
-

Kategoriler

CWE-862 Octopus Server LOW Octopus 2025

Referanslar

https://advisories.octopus.com/post/2024/sa2025-03/ https://advisories.octopus.com/post/2025/sa2025-03/