CVE-2025-0513

LOW EPSS 13.0%

Published Feb 11, 20251y ago · Modified Jun 17, 20261w ago

1.8 CVSS 4.0

Low

Published Feb 11, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

Description

In affected versions of Octopus Server error messages were handled unsafely on the error page. If an adversary could control any part of the error message they could embed code which may impact the user viewing the error message.

CVSS Details

Base Score

1.8

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity High

Privileges Required High

User Interaction A

Scope X

Threat Intelligence

EPSS Exploit Probability

13.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 4

Vendor	Product	Version	Range
octopus	octopus_server	*	≥2024.3.164 – <2024.3.12985
octopus	octopus_server	*	≥2024.4.401 – <2024.4.6962
linux	linux_kernel	*	any
microsoft	windows	*	any

References 1

advisories.octopus.com https://advisories.octopus.com/post/2024/sa2025-04/

Broken Link

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.