Security Advisory

CVE-2019-19376

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-11-28 16:16:46
Last updated 2024-08-05 02:16:47
Assigner mitre
State PUBLISHED

Description

In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of service condition. (The fix for this was also backported to LTS 2019.9.8 and LTS 2019.6.14.)