442 matches found
GHSA-X7R7-WMJ8-VV5G Cross-site Scripting in OctoPrint
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. The login endpoint allows for javascript injection which may lead to account takeover in a phishing scenario...
Cross-site Scripting in OctoPrint
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. The login endpoint allows for javascript injection which may lead to account takeover in a phishing scenario...
Cross-site Scripting in OctoPrint
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0. The Stream URL of octoprint application allowing a xss payload to execute...
GHSA-H8PC-J334-JJHM Cross-site Scripting in OctoPrint
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0. The Stream URL of octoprint application allowing a xss payload to execute...
CVE-2022-1432
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1430
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1432
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1430
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
Cross site scripting
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
PYSEC-2022-200
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
Cross site scripting
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
PYSEC-2022-201
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1432 Cross-site Scripting (XSS) - Generic in octoprint/octoprint
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1432
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1432 Cross-site Scripting (XSS) - Generic in octoprint/octoprint
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1432
CVE-2022-1432 describes a Cross-site Scripting (XSS) vulnerability in OctoPrint prior to 1.8.0. Concrete details from connected sources indicate the XSS stems from insufficient filtering/escaping in the webcam stream test functionality, enabling injection of JavaScript in the client context. The ...
CVE-2022-1430 Cross-site Scripting (XSS) - DOM in octoprint/octoprint
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1430 Cross-site Scripting (XSS) - DOM in octoprint/octoprint
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1430
CVE-2022-1430 affects the OctoPrint project (octoprint/octoprint) prior to version 1.8.0, highlighting a DOM-based Cross-site Scripting (XSS) vulnerability in the web UI. The issue enables JavaScript injection via the login endpoint (as described in the related GHSA advisory), which could lead to...