CVE-2021-32560

CVE-2021-32560 (Mode C) Affected: OctoPrint prior to 1.6.0.Vulnerability: In the Logging subsystem, incorrect access control exists by attempting to manage files that are not *.log files.Impact: The issue involves access control on logs/files, with the CVSS indicating potential partial confidenti...

PT-2021-19782

Name of the Vulnerable Software and Affected Versions OctoPrint versions prior to 1.6.0 Description The issue is related to incorrect access control in the Logging subsystem, which attempts to manage files that are not .log files. This could potentially lead to unauthorized access or manipulation...

OctoPrint 访问控制错误漏洞

OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A security vulnerability previously existed in OctoPrint version 1.6.0. The vulnerability stemmed from the Logging subsystem in the program having incorrect access control...

CVE-2021-32561: Improper Neutralization of Input During Web Page Generation

OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters...

OctoPrint 跨站脚本漏洞

OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A cross-site request vulnerability existed prior to OctoPrint version 1.6.0. The vulnerability originated in the program because an API error message included the value of an input parameter. No...

CVE-2021-32560: Undefined Security Weakness

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

PT-2021-19783

Name of the Vulnerable Software and Affected Versions OctoPrint versions prior to 1.6.0 Description The issue allows for XSS because API error messages include the values of input parameters, such as username or other user-provided data. This can lead to malicious scripts being executed on the...

OctoPrint Detection (HTTP)

HTTP based detection of the OctoPrint Web UI for 3D printers. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

DISPUTED OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint...

CVE-2018-16710

OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint onto the...

CVE-2018-16710

OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint onto the...

CVE-2018-16710

OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint onto the...

CVE-2018-16710

CVE-2018-16710 affects OctoPrint 1.3.9 and earlier, where remote attackers can obtain sensitive information or cause a denial of service via HTTP requests on port 8081. The Red Hat and OSV/NVD entries reiterate this issue; vendor notes warn against exposing OctoPrint to the public internet. The a...

CVE-2018-16710: Exposure of Sensitive Information to an Unauthorized Actor

OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. NOTE: the vendor disputes the significance of this report because their documentation states that with "blind port forwarding ... Putting OctoPrint onto the...

Multiple OctoPrint Override Access Vulnerabilities

OctoPrint is an open source 3D printer control system. The system is able to control and monitor 3D printer status and print jobs. Multiple over-the-horizon access vulnerabilities exist in OctoPrint. An attacker can exploit the vulnerabilities to gain unauthorized access to downloaded historical...

PT-2018-13698 · Octoprint · Octoprint

Name of the Vulnerable Software and Affected Versions: OctoPrint versions 1.3.9 and earlier Description: The issue allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests on port 8081. The vendor disputes the significance of this report, citing their...