423 matches found
Input validation
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3...
PYSEC-2022-283
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3...
PYSEC-2022-282
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists...
CVE-2022-3068 Improper Privilege Management in octoprint/octoprint
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-3068 Improper Privilege Management in octoprint/octoprint
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-3068 Improper Privilege Management in octoprint/octoprint
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-3068
CVE-2022-3068 affects the OctoPrint project (octoprint/octoprint) prior to version 1.8.3 due to improper privilege management. The RedHat/OSV/GHSA entries corroborate the issue and, per OSV and GHSA, a patch exists in version 1.8.3. NVD lists a high impact (CVSSv3.1: 8.8, network, high confidenti...
CVE-2022-3068
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-2888 Insufficient Session Expiration in octoprint/octoprint
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists...
CVE-2022-2888 Insufficient Session Expiration in octoprint/octoprint
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists...
CVE-2022-2888 Insufficient Session Expiration in octoprint/octoprint
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists...
CVE-2022-2888
CVE-2022-2888 describes Insufficient Session Expiration in OctoPrint. If an attacker obtains a victim’s OctoPrint session cookie, they can authenticate as that victim for as long as the account exists. Public docs consistently tie this to the use of a session cookie to authenticate, with impact l...
CVE-2022-2888
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists...
CVE-2022-2872
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...
PYSEC-2022-286
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...
PYSEC-2022-286
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-2872 Unrestricted Upload of File with Dangerous Type in octoprint/octoprint
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...