Improper Error Message Handling in Octopus Server by Octopus Deploy
CVE-2025-0513

1.8LOW

Key Information:

Vendor

Octopus Deploy

Status
Octopus Server
Vendor
CVE Published:
11 February 2025

What is CVE-2025-0513?

In certain versions of Octopus Server, error messages are improperly managed, creating an opportunity for attackers. If an adversary is able to manipulate any portion of the error message, they could potentially embed malicious code. This exploitation may allow the attacker to affect users who view the error page, underscoring the critical need for developers to implement robust error handling procedures to safeguard application integrity.

Affected Version(s)

Octopus Server Windows 2024.3.164 < 2024.3.12985

Octopus Server Windows 2024.4.401 < 2024.4.6962

References

https://advisories.octopus.com/post/2024/sa2025-04/

CVSS V4

Score:
1.8
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability was found by Edward Prior (@JankhJankh)
.
CVE-2025-0513 : Improper Error Message Handling in Octopus Server by Octopus Deploy