CVE-2022-2930

Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3...

CVE-2022-2930

creationtimestamp| type| source ---|---|--- 2022-12-04 04:02:30+00:00| seen| Telegram/tAb07CW7JXvB2mshLs5OGp3WPFQeypMsxTDVirsKP3eZZc...

octoprint-nanny (>=0.10.0rc1, <=0.13.4) potentially affected by CVE-2022-2930 via octoprint (>=1.8.0rc3, <=1.8.2)

octoprint PYPI version =1.8.0rc3, =0.10.0rc1, =0.13.4 Source cves: CVE-2022-2930 Source advisory: OSV:GHSA-39GF-864W-PXW4...

CVE-2022-2930

Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3...

octoprint-nanny (>=0.10.0rc1, <=0.13.4) potentially affected by CVE-2022-2930 via octoprint (>=1.8.0rc3, <=1.8.2)

octoprint PYPI version =1.8.0rc3, =0.10.0rc1, =0.13.4 Source cves: CVE-2022-2930 Source advisory: OSV:PYSEC-2022-43142...

octoprint-nanny (>=0.10.0rc1, <=0.13.4) potentially affected by CVE-2022-2930 via octoprint (>=1.8.0rc3, <=1.8.2)

octoprint PYPI version =1.8.0rc3, =0.10.0rc1, =0.13.4 Source cves: CVE-2022-2930 Source advisory: MEND:CVE-2022-2930...

CVE-2022-2930 Unverified Password Change in octoprint/octoprint

Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3...

CVE-2022-2930

Affected software: OctoPrint (octoprint/octoprint) prior to version 1.8.3. Root cause: unverified password change flow that allowed a password change without requiring the current password, enabling potential account compromise. Impact: high confidentiality, integrity, and availability risks as d...