CVE-2020-27155

—

CVSS 3.1

7.5 high

EPSS

1%p68

Published

Oct 22, 2020 (Oct 22, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to present itself as a trusted one.

Vendors: octopus
Products: octopus deploy
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.