CVE-2019-19376

In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and…

published November 28, 2019

CVSS
—
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of service condition. (The fix for this was also backported to LTS 2019.9.8 and LTS 2019.6.14.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00988 · 62.1th percentile
Published
2019-11-28T16:16Z
EPSS history
Timeline
  • 28 NOV 16:16Z
    In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and…
    cvelistv5