VULNERABILITY INTELLIGENCE
CVE-2025-0513
CVSS score5.4 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2025-02-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Description
In affected versions of Octopus Server error messages were handled unsafely on the error page. If an adversary could control any part of the error message they could embed code which may impact the user viewing the error message.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-79
Primary references
- security@octopus.com — Broken Link