CVE-2025-0539
In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allowing a suitably positioned attacker to compromise the account running Octopus Server and potentially the host infrastructure itself.
Vendor
Product
CWE
Yayın Tarihi
2025-04-10 06:15:53
Güncelleme
2025-07-02 17:23:54
Source Identifier
security@octopus.com
KEV Date Added
-