Lucene search
Veracode Vulnerability DatabaseVERACODE:37609HistoryOct 20, 2022 - 2:44 a.m.
Information Disclosure
2022-10-2002:44:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
octoprint
vulnerability
symlinks
language packs
directory traversal
information disclosure
server
EPSS
0.001
Percentile
17.8%
octoprint is vulnerable to information disclosure. The vulnerability is due to multiple functions in languages.py not sanitizing symlinks in language packs resulting in directory traversal used to extract information from the server.
Related
cvelist
cvelist
nvd
nvd
CVE-2022-3607
2022-10-19 13:15:08
osv
osv
OctoPrint vulnerable to Special Element Injection
2022-10-19 19:00:24
CVE-2022-3607
2022-10-19 13:15:08
PYSEC-2022-42975
2022-10-19 13:15:00
github
github
OctoPrint vulnerable to Special Element Injection
2022-10-19 19:00:24
cve
cve
CVE-2022-3607
2022-10-19 13:15:08
prion
prion
Design/Logic Flaw
2022-10-19 13:15:00
huntr
huntr
ZipSlip Symlink variant allows to read any file within OctoPrint Box
2022-08-24 15:59:26