Vulnerabilities > Octopus > Octopus Deploy > 2019.6.8

DATE CVE VULNERABILITY TITLE RISK
2019-11-18 CVE-2019-19084 Unrestricted Upload of File with Dangerous Type vulnerability in Octopus Deploy
In Octopus Deploy 3.3.0 through 2019.10.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted package, triggering an exception that exposes underlying operating system details.
network
low complexity
octopus CWE-434
4.3
4.3
2019-07-25 CVE-2019-14268 Information Exposure Through Log Files vulnerability in Octopus Deploy
In Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an authenticated user (in certain limited circumstances) could trigger a deployment that writes the web request proxy password to the deployment log in cleartext.
network
low complexity
octopus CWE-532
6.5
6.5