Threats tagged 'ghsa-7cvm-rc3q-qjrq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-12887In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a Medium5.12026-10-27GCVE DatabaseCVE-2026-12887 A vulnerability in Octopus Server allows a user with permission to upload a malicious NuGet package to deploy a script step that executes outside of the intended parent directory. This could lead to unintended script execution paths. The issue affects unspecified versions of Octopus Server and has a medium severity rating with a CVSS score of 5.1. Report on CVE-2026-12887 Vulnerability #ghsa-7cvm-rc3q-qjrq	GCVE Database	2026-10-27

Page 1 of 1