NetSight
low2.2

CVE-2024-4811

In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restricted project artifacts.

Impact

In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restricted project artifacts.

Affected products

VendorProductAffected versions
OctopusOctopus Server
from 2023.1.4189 before 2023.4.8608
from 2024.1.437 before 2024.1.12759
from 2024.2.101 before 2024.2.9193

Weakness classification

References