Cross-Site Scripting (XSS)

octoprint is vulnerable to cross-site scripting. The vulnerability exists in webcam stream test due to lack of sanitization which allows a malicious attacker to inject and execute arbitrary javascript...

GHSA-X7R7-WMJ8-VV5G Cross-site Scripting in OctoPrint

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. The login endpoint allows for javascript injection which may lead to account takeover in a phishing scenario...

Cross-site Scripting in OctoPrint

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. The login endpoint allows for javascript injection which may lead to account takeover in a phishing scenario...

Cross-site Scripting in OctoPrint

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0. The Stream URL of octoprint application allowing a xss payload to execute...

GHSA-H8PC-J334-JJHM Cross-site Scripting in OctoPrint

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0. The Stream URL of octoprint application allowing a xss payload to execute...

CVE-2022-1432

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1430

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1430

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1432

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

Cross site scripting

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

PYSEC-2022-201

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

Cross site scripting

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

PYSEC-2022-200

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1432 Cross-site Scripting (XSS) - Generic in octoprint/octoprint

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1432 Cross-site Scripting (XSS) - Generic in octoprint/octoprint

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1432

CVE-2022-1432 describes a Cross-site Scripting (XSS) vulnerability in OctoPrint prior to 1.8.0. Concrete details from connected sources indicate the XSS stems from insufficient filtering/escaping in the webcam stream test functionality, enabling injection of JavaScript in the client context. The ...

CVE-2022-1430 Cross-site Scripting (XSS) - DOM in octoprint/octoprint

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1430 Cross-site Scripting (XSS) - DOM in octoprint/octoprint

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1430

CVE-2022-1430 affects the OctoPrint project (octoprint/octoprint) prior to version 1.8.0, highlighting a DOM-based Cross-site Scripting (XSS) vulnerability in the web UI. The issue enables JavaScript injection via the login endpoint (as described in the related GHSA advisory), which could lead to...

OctoPrint 跨站脚本漏洞

OctoPrint is an application that provides a fast web interface for controlling consumer 3D printers. A cross-site scripting vulnerability exists in versions prior to OctoPrint 1.8.0, which stems from a lack of filtering and escaping of data in the software webcam stream test. An attacker could us...