Boletines de Vulnerabilidades

CVE-2025-0539

   
Software afectado MICROSOFT
 
In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allowing a suitably positioned attacker to compromise the account running Octopus Server and potentially the host infrastructure itself.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-0539