1. Home
  2. CVE Database
  3. CVE-2025-0525
HIGH · 7.5

CVE-2025-0525

In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a target file. This could provide an adversary with information that may aid in furthe...

Vulnerability Description

In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a target file. This could provide an adversary with information that may aid in further attacks against the server.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
OctopusOctopus Server>= 2020.6.4592, < 2024.3.13007
LinuxLinux Kernel-
MicrosoftWindows-

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2025-0525?

CVE-2025-0525 is a vulnerability with a CVSS score of 7.5 (HIGH). In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a target file. This could provide an adversary with information that may aid in furthe...

How severe is CVE-2025-0525?

CVE-2025-0525 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-0525?

Check the references section above for vendor advisories and patch information. Affected products include: Octopus Octopus Server, Linux Linux Kernel, Microsoft Windows.