CVE-2025-0539

In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material…

Medium · published April 10, 2025

CVSS v4.0
5.9
EPSS
0%
Percentile
28.7
In the wild
Unconfirmed
What it is

In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allowing a suitably positioned attacker to compromise the account running Octopus Server and potentially the host infrastructure itself.

The record
Technical detail
CVSS v4.0
5.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00361 · 28.7th percentile
Published
2025-04-10T05:20Z
EPSS history
Timeline
  • 10 APR 05:20Z
    In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material…
    cvelistv5