CVE-2022-1430

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

octoprint-nanny (>=0.10.0rc1, <=0.10.0) potentially affected by CVE-2022-1430 via octoprint (>=1.8.0rc3, <=1.8.0rc5)

octoprint PYPI version =1.8.0rc3, =0.10.0rc1, =0.10.0 Source cves: CVE-2022-1430 Source advisory: OSV:GHSA-X7R7-WMJ8-VV5G...

CVE-2022-1430 Cross-site Scripting (XSS) - DOM in octoprint/octoprint

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1430

CVE-2022-1430 affects the OctoPrint project (octoprint/octoprint) prior to version 1.8.0, highlighting a DOM-based Cross-site Scripting (XSS) vulnerability in the web UI. The issue enables JavaScript injection via the login endpoint (as described in the related GHSA advisory), which could lead to...