Octopus Deploy
Approved changes feed: RSS · Atom
cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:-:*:*:*
part: a version: * update: *
| Vendor | Octopus (62d36c7c-63f4-5854-a734-f948ec5d2bcb) |
|---|---|
| Product | Octopus Deploy (41e7579e-1d5a-5b3e-8b00-de8725a38394) |
| Edition | * |
| Language | * |
| Software edition | - |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-19376 |
vulnerable | 2026-06-08 05:13:22.226939 |
Details available
In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of service condition. (The fix for this was also backported to LTS 2019.9.8 and LTS 2019.6.14.)
Published: 2019-11-28T16:16:46.000Z
Updated: 2024-08-05T02:16:47.048Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19375 |
vulnerable | 2026-06-08 05:13:22.225724 |
Details available
In Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF cookie was sometimes sent without the secure attribute. (The fix for this was backported to LTS versions 2019.6.14 and 2019.9.8.)
Published: 2019-11-28T16:16:36.000Z
Updated: 2024-08-05T02:16:47.081Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.