OctoPrint 跨站脚本漏洞

OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A cross-site request vulnerability existed prior to OctoPrint version 1.6.0. The vulnerability originated in the program because an API error message included the value of an input parameter. No...

CVE-2021-32561: Improper Neutralization of Input During Web Page Generation

OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters...

OctoPrint Detection (HTTP)

HTTP based detection of the OctoPrint Web UI for 3D printers. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

DISPUTED OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint...

CVE-2018-16710

OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint onto the...

CVE-2018-16710

OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint onto the...

CVE-2018-16710

CVE-2018-16710 affects OctoPrint 1.3.9 and earlier, where remote attackers can obtain sensitive information or cause a denial of service via HTTP requests on port 8081. The Red Hat and OSV/NVD entries reiterate this issue; vendor notes warn against exposing OctoPrint to the public internet. The a...

CVE-2018-16710

OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint onto the...

PT-2018-13698 · Octoprint · Octoprint

Name of the Vulnerable Software and Affected Versions: OctoPrint versions 1.3.9 and earlier Description: The issue allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. The vendor disputes the significance of this report, citing their...

CVE-2018-16710: Exposure of Sensitive Information to an Unauthorized Actor

OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint onto the...

Multiple OctoPrint Override Access Vulnerabilities

OctoPrint is an open source 3D printer control system. The system is able to control and monitor 3D printer status and print jobs. Multiple over-the-horizon access vulnerabilities exist in OctoPrint. An attacker can exploit the vulnerabilities to gain unauthorized access to downloaded historical...