Threats tagged 'ghsa-8wrj-pg56-7v73'

A vulnerability in certain versions of Octopus Server with LDAP authentication enabled allows incorrect validation of external identities during user registration. This flaw can cause a newly registered user to inherit LDAP-mapped team memberships and permissions of another user, potentially leading to unauthorized access. The issue affects only instances where LDAP groups are mapped to Octopus teams.