CVE-2024-4456

Description

In affected versions of Octopus Server with certain access levels it was possible to embed a Cross-Site Scripting payload on the audit page.

Affected Platforms

Weakness Type

CWE-79

References

• https://advisories.octopus.com/post/2024/sa2024-04/
• https://advisories.octopus.com/post/2024/sa2024-04/