NVD

Id
87845  
Name
CVE-2017-11348  
Description
In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted NuGet package, potentially overwriting other packages or modifying system files. This is a directory traversal in the PackageId value.  
Reject
 
CVSS Version
 
CVSS Score
 
Severity
 
CVSS Base Score
 
CVSS Impact Subscore
 
CVSS Exploit Subscore
 
CVSS Vector
 
Pub Date
2017-07-18  
Published
2017-07-17  
Modified Date
2017-07-17  
Seq
2017-11348  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
428721 87845 CVE-2017-1000373 99177  View
428722 87845 CVE-2017-1000373 https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/qsort.c?rev=1.15&content-type=text/x-cvsweb-markup  View
428723 87845 CVE-2017-1000373 https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt  View
428724 87845 CVE-2017-1000373 99177  View
428725 87845 CVE-2017-1000373 https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib/libc/stdlib/qsort.c?rev=1.15&content-type=text/x-cvsweb-markup  View
428726 87845 CVE-2017-1000373 https://www.qualys.com/2017/06/19/stack-clash/stack-clash.txt  View

Related JVN