PT-2025-6190 · Unknown · Octopus Server

Published 2025-02-11 · Updated 2025-07-02 · CVE-2025-0513

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Octopus Server (affected versions not specified)

Description: The issue arises from the unsafe handling of error messages on the error page in affected versions of Octopus Server. If an adversary can control any part of the error message, they could embed code that may impact the user viewing the error message.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-0513

Affected Products

Octopus Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-0513 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0513 · Vendor Advisory
• https://twitter.com/CVEnew/status/1889265764403966218 · Twitter Post
• https://advisories.octopus.com/post/2024/sa2025-04 · Note
• https://t.me/cvedetector/17698 · Telegram Post
• https://twitter.com/WolfgangSesin/status/1889278629546164516 · Twitter Post
• https://t.me/cvenotify/127441 · Telegram Post