medium6.1
CVE-2020-26161
In Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modified HTTP Host header.
Impact
In Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modified HTTP Host header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Octopus | Octopus Deploy | from 2019.8.2 through 2020.4.2 |