WS-2022-0249

An open-redirect vulnerability was discovered in In OctoPrint before 1.8.2. The redirect get variable in login page isn't properly checked. Currently, it check if url.scheme and url.netloc are empty using urllib, which does not handle all URL currently. An attacker could redirect a user to a...