441 matches found
CVE-2022-3068 Improper Privilege Management in octoprint/octoprint
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-3068 Improper Privilege Management in octoprint/octoprint
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-3068 Improper Privilege Management in octoprint/octoprint
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-3068
CVE-2022-3068 affects the OctoPrint project (octoprint/octoprint) prior to version 1.8.3 due to improper privilege management. The RedHat/OSV/GHSA entries corroborate the issue and, per OSV and GHSA, a patch exists in version 1.8.3. NVD lists a high impact (CVSSv3.1: 8.8, network, high confidenti...
CVE-2022-3068
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-2888 Insufficient Session Expiration in octoprint/octoprint
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists...
CVE-2022-2888
CVE-2022-2888 describes Insufficient Session Expiration in OctoPrint. If an attacker obtains a victim’s OctoPrint session cookie, they can authenticate as that victim for as long as the account exists. Public docs consistently tie this to the use of a session cookie to authenticate, with impact l...
CVE-2022-2888 Insufficient Session Expiration in octoprint/octoprint
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists...
CVE-2022-2888
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists...
CVE-2022-2888 Insufficient Session Expiration in octoprint/octoprint
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists...
CVE-2022-2872
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...
PYSEC-2022-286
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...
Unrestricted file upload
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...
PYSEC-2022-286
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-2872 Unrestricted Upload of File with Dangerous Type in octoprint/octoprint
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-2872
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-2872 Unrestricted Upload of File with Dangerous Type in octoprint/octoprint
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-2872 Unrestricted Upload of File with Dangerous Type in octoprint/octoprint
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3...
CVE-2022-2872
CVE-2022-2872 affects OctoPrint: the GitHub repository octoprint/octoprint prior to version 1.8.3 is vulnerable to Unrestricted Upload of File with Dangerous Type due to misconfiguration in the file-move functionality, allowing an attacker to rename a malicious upload as a .gcode file. Severity i...
PT-2022-19196
Name of the Vulnerable Software and Affected Versions OctoPrint versions prior to 1.8.3 Description The issue is related to the unrestricted upload of files with dangerous types. Due to a misconfiguration in the move file functionality, an attacker could change the file extension of an uploaded...