PT-2024-18204 · Unknown · Octopus Server

Published 2024-09-10 · Updated 2025-07-02 · CVE-2024-1656

Positive Technologies (AI Summary)

CVSS v3.1

2.6

Low

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Octopus Server (affected versions not specified)

Description The issue is related to a weak content security policy in affected versions of the software. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-1656

Affected Products

Octopus Server

References · 8

• https://osv.dev/vulnerability/CVE-2024-1656 · Vendor Advisory
• https://advisories.octopus.com/post/2024/sa2024-08 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-1656 · Security Note
• https://t.me/cvenotify/94122 · Telegram Post
• https://t.me/cvedetector/5332 · Telegram Post
• https://t.me/cvenotify/127437 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1833820786005626982 · Twitter Post
• https://twitter.com/CVEnew/status/1833728134316994812 · Twitter Post