531 matches found
Cross-Site Scripting (XSS)
octoprint is vulnerable to cross-site scripting. The vulnerability exists in webcam stream test due to lack of sanitization which allows a malicious attacker to inject and execute arbitrary javascript...
GHSA-X7R7-WMJ8-VV5G Cross-site Scripting in OctoPrint
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. The login endpoint allows for javascript injection which may lead to account takeover in a phishing scenario...
Cross-site Scripting in OctoPrint
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. The login endpoint allows for javascript injection which may lead to account takeover in a phishing scenario...
octoprint-nanny (>=0.10.0rc1, <=0.10.0) potentially affected by CVE-2022-1430 via octoprint (>=1.8.0rc3, <=1.8.0rc5)
octoprint PYPI version =1.8.0rc3, =0.10.0rc1, =0.10.0 Source cves: CVE-2022-1430 Source advisory: GHSA-X7R7-WMJ8-VV5G...
octoprint-nanny (>=0.10.0rc1, <=0.10.0) potentially affected by CVE-2022-1430 via octoprint (>=1.8.0rc3, <=1.8.0rc5)
octoprint PYPI version =1.8.0rc3, =0.10.0rc1, =0.10.0 Source cves: CVE-2022-1430 Source advisory: OSV:GHSA-X7R7-WMJ8-VV5G...
Cross-site Scripting in OctoPrint
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0. The Stream URL of octoprint application allowing a xss payload to execute...
octoprint-nanny (>=0.10.0rc1, <=0.10.0) potentially affected by CVE-2022-1432 via octoprint (>=1.8.0rc3, <=1.8.0rc5)
octoprint PYPI version =1.8.0rc3, =0.10.0rc1, =0.10.0 Source cves: CVE-2022-1432 Source advisory: GHSA-H8PC-J334-JJHM...
octoprint-nanny (>=0.10.0rc1, <=0.10.0) potentially affected by CVE-2022-1432 via octoprint (>=1.8.0rc3, <=1.8.0rc5)
octoprint PYPI version =1.8.0rc3, =0.10.0rc1, =0.10.0 Source cves: CVE-2022-1432 Source advisory: OSV:GHSA-H8PC-J334-JJHM...
GHSA-H8PC-J334-JJHM Cross-site Scripting in OctoPrint
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0. The Stream URL of octoprint application allowing a xss payload to execute...
CVE-2022-1430
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1430
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1432
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1432
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
PYSEC-2022-200
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
octoprint-nanny (>=0.10.0rc1, <=0.10.0) potentially affected by CVE-2022-1430 via octoprint (>=1.8.0rc3, <=1.8.0rc5)
octoprint PYPI version =1.8.0rc3, =0.10.0rc1, =0.10.0 Source cves: CVE-2022-1430 Source advisory: OSV:PYSEC-2022-200...
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
octoprint-nanny (>=0.10.0rc1, <=0.10.0) potentially affected by CVE-2022-1432 via octoprint (>=1.8.0rc3, <=1.8.0rc5)
octoprint PYPI version =1.8.0rc3, =0.10.0rc1, =0.10.0 Source cves: CVE-2022-1432 Source advisory: OSV:PYSEC-2022-201...
PYSEC-2022-201
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
