441 matches found
CVE-2023-41047 Improper Neutralization of Special Elements Used in a Template Engine in OctoPrint
OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows malicious admins to configure a specially crafted GCODE script that will allow code execution during rendering of that script. An attacker might use this to extract da...
CVE-2023-41047: Improper Neutralization of Special Elements Used in a Template Engine
OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows malicious admins to configure a specially crafted GCODE script that will allow code execution during rendering of that script. An attacker might use this to extract da...
PT-2023-6631 · Octoprint · Octoprint
Name of the Vulnerable Software and Affected Versions: OctoPrint versions up to and including 1.9.2 Description: The issue allows malicious administrators to configure a specially crafted GCODE script, enabling code execution during the rendering of that script. This could be used to extract or...
OctoPrint Security Vulnerability
OctoPrint is an application. that provides a fast web interface for controlling consumer 3D printers. A security vulnerability exists in OctoPrint versions prior to 1.9.3, which originated from a vulnerability that allows an attacker to extract data managed by OctoPrint or manipulate data managed...
dbxfs (>=1.0.51, <=1.0.54), fourutils (0.2.1) +11 more potentially affected by CVE-2023-28117 via sentry-sdk (0.20.3)
sentry-sdk PYPI version 0.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - dbxfs =1.0.51, =2.8.1289, =1.4.1rc1, =1.0.4, =0.2.2, =3.3.0, =0.0.7, =2.5.0, =2.5.1 - sentrylogs 0.5.0 - shy-sentry 1.2.0 Source cves:...
octoprint (>=1.4.0rc1, <=1.4.0) potentially affected by CVE-2023-28117 via sentry-sdk (0.13.2)
sentry-sdk PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - octoprint =1.4.0rc1, =1.4.0 Source cves: CVE-2023-28117 Source advisory: OSV:GHSA-29PR-6JR8-Q5JM...
Information Disclosure
octoprint is vulnerable to information disclosure. The vulnerability is due to multiple functions in languages.py not sanitizing symlinks in language packs resulting in directory traversal used to extract information from the server...
OctoPrint vulnerable to Special Element Injection
OctoPrint prior to 1.8.3 is vulnerable to Special Element Injection...
GHSA-RJ5F-VM79-5J84 OctoPrint vulnerable to Special Element Injection
OctoPrint prior to 1.8.3 is vulnerable to Special Element Injection...
CVE-2022-3607
Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository octoprint/octoprint prior to 1.8.3...
PYSEC-2022-42975
Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository octoprint/octoprint prior to 1.8.3...
PYSEC-2022-42975
Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository octoprint/octoprint prior to 1.8.3...
Design/Logic Flaw
Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-3607: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository octoprint/octoprint prior to 1.8.3...
OctoPrint 注入漏洞
OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A security vulnerability exists in versions prior to OctoPrint 1.8.3. An attacker exploited the vulnerability to cause special elements to be injected...
CVE-2022-3607
CVE-2022-3607 affects OctoPrint (octoprint/octoprint) prior to 1.8.3. The root cause is failure to sanitize Special Elements into a different plane (Special Element Injection). According to the data, the vulnerability has a HIGH impact on confidentiality (C) with no availability impact, exploitab...
CVE-2022-3607 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprint
Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-3607 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprint
Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository octoprint/octoprint prior to 1.8.3...
PT-2022-23157
Name of the Vulnerable Software and Affected Versions OctoPrint versions prior to 1.8.3 Description The issue is related to the failure to sanitize special elements into a different plane, also known as Special Element Injection. This problem affects the OctoPrint software. Recommendations For...
