Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q342-7m92-3wgm

Опубликовано: 03 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation.

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation.

EPSS

Процентиль: 44%
0.00214
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-288
CWE-601

Связанные уязвимости

CVSS3: 6.1
nvd
около 3 лет назад

In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation.

EPSS

Процентиль: 44%
0.00214
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-288
CWE-601