GHSA-H8PC-J334-JJHM Cross-site Scripting in OctoPrint

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0. The Stream URL of octoprint application allowing a xss payload to execute...

CVE-2022-1432

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1430

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1430

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1432

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

Cross site scripting

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

PYSEC-2022-201

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

Cross site scripting

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

PYSEC-2022-200

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1432 Cross-site Scripting (XSS) - Generic in octoprint/octoprint

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1432 Cross-site Scripting (XSS) - Generic in octoprint/octoprint

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1432

CVE-2022-1432 describes a Cross-site Scripting (XSS) vulnerability in OctoPrint prior to 1.8.0. Concrete details from connected sources indicate the XSS stems from insufficient filtering/escaping in the webcam stream test functionality, enabling injection of JavaScript in the client context. The ...

CVE-2022-1430 Cross-site Scripting (XSS) - DOM in octoprint/octoprint

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1430 Cross-site Scripting (XSS) - DOM in octoprint/octoprint

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

CVE-2022-1430

CVE-2022-1430 affects the OctoPrint project (octoprint/octoprint) prior to version 1.8.0, highlighting a DOM-based Cross-site Scripting (XSS) vulnerability in the web UI. The issue enables JavaScript injection via the login endpoint (as described in the related GHSA advisory), which could lead to...

CVE-2022-1432: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...

OctoPrint 跨站脚本漏洞

OctoPrint is an application that provides a fast web interface for controlling consumer 3D printers. A cross-site scripting vulnerability exists in versions prior to OctoPrint 1.8.0, which stems from a lack of filtering and escaping of data in the software webcam stream test. An attacker could us...

CVE-2022-1430: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...

OctoPrint 跨站脚本漏洞

OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A cross-site scripting vulnerability exists in OctoPrint versions prior to 1.8.0, which stems from a lack of data filtering and escaping in the login function in the software views.py...

Cross-site Scripting (XSS) - Generic

Description The Stream URL of octoprint application allowing xss payload to execute for which its leads to Cross-site Scripting XSS Proof of Concept Login to the application Now go to settings - Webcam & Timelapse - Stream URL and insert the payload " in the Stream URL and click on "Test" You wil...