Summary

In affected versions of Octopus Server it is possible to reveal information about teams via the API due to an Insecure Direct Object Reference (IDOR) vulnerability

Affected products

Does this affect you?

Add your gear to cvedb and we'll alert you only when octopus ships something exploited.

References

• NVD entry
• CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.