First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-1656

LowCVSS 2.6/10Last modified Jun 17, 2026

Description

Affected versions of Octopus Server had a weak content security policy.

Metrics

CVSS 3.1 2.6/10CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

Affected software

Vendor	Product	Versions
Octopus Deploy	Octopus Server	>= 2018.1.0, < 2024.2.9193

References

https://advisories.octopus.com/post/2024/sa2024-08/Vendor Advisory

Timeline

Published: Sep 11, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-16578.1A flaw was found in the ansible automation platform. An insecure WebSocket connection was being used in installation from the Ansible rulebo CVE-2024-16585.4The Grid Shortcodes WordPress plugin before 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back CVE-2024-16599.8Arbitrary File Upload vulnerability in MegaBIP software allows attacker to upload any file to the server (including a PHP code file) without CVE-2024-16604.8The Top Bar WordPress plugin before 3.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as CVE-2024-16615.5A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852_B20230719. Affected by this vulnerability is an unknown f CVE-2024-16627.5Missing Authentication for Critical Function, Missing Authorization vulnerability in PORTY Smart Tech Technology Joint Stock Company PowerBa CVE-2024-16634.8The Ultimate Noindex Nofollow Tool II WordPress plugin before 1.3.6 does not sanitise and escape some of its settings, which could allow hig CVE-2024-16646.1The Responsive Gallery Grid WordPress plugin before 2.3.11 does not sanitise and escape some of its settings, which could allow high privile CVE-2024-16665.3In lunary-ai/lunary version 1.0.0, an authorization flaw exists that allows unauthorized radar creation. The vulnerability stems from the la CVE-2024-16686.5The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Sensitive Information Exposure in versions up t CVE-2024-16698.8Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory acces CVE-2024-16708.8Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafte

CVE-2024-1656: Low severity, CVSS 2.6 | Vulnix