CVE-2017-15611

6.5 mediumEPSS 0.7%

Medium (6.5) in octopus octopus deploy. EPSS 0.7% chance of exploitation in the next 30 days.

In Octopus before 3.17.7, an authenticated user who was explicitly granted the permission to invite new users (aka UserInvite) can invite users to teams with escalated privileges.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2017-10-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

octopus:octopus_deploy

References

https://github.com/OctopusDeploy/Issues/issues/3864
https://github.com/OctopusDeploy/Issues/issues/3864

Check your stack JSON