description: In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.
problem types: Open Redirect Vulnerability in Octopus Server
affected:
{
product: Octopus Server
vendor: Octopus Deploy
versions:
lessThan: 2021.2.8011, status: affected, version: unspecified, versionType: custom
lessThan: 2021.3.11057, status: affected, version: unspecified, versionType: custom
}