CVE-2017-15609: Octopus Deploy

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations involving Offline Drop Targets.

Affected products

• Octopus Octopus Deploy: up to and including 3.17.6

Published 2017-10-19. Last modified 2026-06-17.