VulnerabilityAnalyzed
CVE-2025-0513
In affected versions of Octopus Server error messages were handled unsafely on the error page.
LOW 1.8EPSS 0.24%
Does this matter?
Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.
Description
In affected versions of Octopus Server error messages were handled unsafely on the error page. If an adversary could control any part of the error message they could embed code which may impact the user viewing the error message.
- CVSS 4.0
- 1.8 LOWCVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.24% probability · 16th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- octopus/octopus server
- Source
- security@octopus.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.