CVE-2017-11348

MEDIUM

Octopus Deploy 3.x < 3.15.4 - Authenticated Path Traversal via NuGet PackageId

Title source: llm

Description

In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted NuGet package, potentially overwriting other packages or modifying system files. This is a directory traversal in the PackageId value.

References (1)

Core 1

Core References

Third Party Advisory x_refsource_confirm

https://github.com/OctopusDeploy/Issues/issues/3654

Scores

CVSS v3 5.7

EPSS 0.0122

EPSS Percentile 65.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Details

CWE

CWE-22

Status published

Products (47)

octopus/octopus_deploy 3.6.0

octopus/octopus_deploy 3.7.0

octopus/octopus_server 3.0.0

octopus/octopus_server 3.0.1

octopus/octopus_server 3.0.2

octopus/octopus_server 3.0.3

octopus/octopus_server 3.0.4

octopus/octopus_server 3.0.5

octopus/octopus_server 3.0.6

octopus/octopus_server 3.0.7

... and 37 more

Published Jul 17, 2017

Tracked Since Feb 18, 2026