IT

Tracker / CVE-2024-4811

CVE-2024-4811

Low 2.2

In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restricted project artifacts.

Affected products and versions

octopus octopus_server · 2023.1.4189 → 2023.4.8608
octopus octopus_server · 2024.1.437 → 2024.1.12759
octopus octopus_server · 2024.2.101 → 2024.2.9193

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References