530 matches found
CVE-2022-1432
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1432 Cross-site Scripting (XSS) - Generic in octoprint/octoprint
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
octoprint-nanny (>=0.10.0rc1, <=0.10.0) potentially affected by CVE-2022-1432 via octoprint (>=1.8.0rc3, <=1.8.0rc5)
octoprint PYPI version =1.8.0rc3, =0.10.0rc1, =0.10.0 Source cves: CVE-2022-1432 Source advisory: MEND:CVE-2022-1432...
CVE-2022-1430 Cross-site Scripting (XSS) - DOM in octoprint/octoprint
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1430
CVE-2022-1430 affects the OctoPrint project (octoprint/octoprint) prior to version 1.8.0, highlighting a DOM-based Cross-site Scripting (XSS) vulnerability in the web UI. The issue enables JavaScript injection via the login endpoint (as described in the related GHSA advisory), which could lead to...
CVE-2022-1430
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1430 Cross-site Scripting (XSS) - DOM in octoprint/octoprint
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
octoprint-nanny (>=0.10.0rc1, <=0.10.0) potentially affected by CVE-2022-1430 via octoprint (>=1.8.0rc3, <=1.8.0rc5)
octoprint PYPI version =1.8.0rc3, =0.10.0rc1, =0.10.0 Source cves: CVE-2022-1430 Source advisory: MEND:CVE-2022-1430...
PT-2022-13885
Name of the Vulnerable Software and Affected Versions octoprint versions prior to 1.8.0 Description The issue is related to Cross-site Scripting XSS - Generic in the octoprint application. Specifically, the Stream URL allows a XSS payload to execute. Recommendations For versions prior to 1.8.0,...
PT-2022-13883
Name of the Vulnerable Software and Affected Versions octoprint versions prior to 1.8.0 Description The issue concerns a Cross-site Scripting XSS - DOM vulnerability in the GitHub repository octoprint. This vulnerability allows for javascript injection, potentially leading to account takeover in ...
OctoPrint cross-site scripting vulnerabilities
OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A cross-site scripting vulnerability exists in OctoPrint versions prior to 1.8.0, which stems from a lack of data filtering and escaping in the login function in the software views.py...
OctoPrint cross-site scripting vulnerabilities
OctoPrint is an application that provides a fast web interface for controlling consumer 3D printers. A cross-site scripting vulnerability exists in versions prior to OctoPrint 1.8.0, which stems from a lack of filtering and escaping of data in the software webcam stream test. An attacker could us...
CVE-2022-1430: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - DOM in GitHub repository octoprint/octoprint prior to 1.8.0...
CVE-2022-1432: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Generic in GitHub repository octoprint/octoprint prior to 1.8.0...
Cross-site Scripting (XSS) - Generic
Description The Stream URL of octoprint application allowing xss payload to execute for which its leads to Cross-site Scripting XSS Proof of Concept Login to the application Now go to settings - Webcam & Timelapse - Stream URL and insert the payload " in the Stream URL and click on "Test" You wil...
OctoPrint Cross-Site Request Vulnerability
OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A cross-site request vulnerability existed prior to OctoPrint version 1.6.0. The vulnerability originated in the program because an API error message included the value of an input parameter. No...
Insecure Access Control
octoprint uses an insecure access control. The vulnerability exists as it attempts to manage files other than .log...
CVE-2021-32561
OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters...