Threats tagged 'ghsa-35xw-x954-7fwr'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-124628In affected versions of Octopus Server, incorrect validation of changes a user made to their own LDAP identity allowed High8.72026-11-12GCVE DatabaseCVE-2026-124628 A vulnerability in certain versions of Octopus Server allows users to bypass restrictions on self-service LDAP identity editing. This flaw enables users to modify their LDAP identity even when administrators have disabled such edits, potentially granting unauthorized access to teams mapped to external LDAP groups. If any of these teams have administrative privileges, the user could escalate their privileges to full administrative level. Report on CVE-2026-124628 Vulnerability CWE-863 #ghsa-35xw-x954-7fwr	GCVE Database	2026-11-12

Page 1 of 1