Known Vulnerabilities for products from Octoprint
Listed below are 12 of the newest known vulnerabilities associated with the vendor "Octoprint".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-41047 json | OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that al... | 6.5 - MEDIUM | 2023-10-09 | 2023-10-13 |
| CVE-2022-3607 json | Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octopr... | 6 - MEDIUM | 2022-10-19 | 2022-10-20 |
| CVE-2022-3068 json | Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3. | 8.8 - HIGH | 2022-09-21 | 2022-09-22 |
| CVE-2022-2930 json | Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3. | 7.8 - HIGH | 2022-08-22 | 2022-08-23 |
| CVE-2022-2888 json | If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use ... | 4.4 - MEDIUM | 2022-09-21 | 2022-09-22 |
| CVE-2022-2872 json | Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3. | 5.4 - MEDIUM | 2022-09-21 | 2022-09-23 |
| CVE-2022-2822 json | An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess user pa... | 7.5 - HIGH | 2022-08-15 | 2022-08-16 |
| CVE-2022-1432 json | Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0. | 6.4 - MEDIUM | 2022-05-18 | 2022-05-25 |
| CVE-2022-1430 json | Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. | 7.5 - HIGH | 2022-05-18 | 2022-05-25 |
| CVE-2021-32561 json | OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters. | 6.1 - MEDIUM | 2021-05-11 | 2021-05-26 |
| CVE-2021-32560 json | The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not... | 6.5 - MEDIUM | 2021-05-11 | 2021-05-26 |
| CVE-2018-16710 json | ** DISPUTED ** OctoPrint through 1.3.9 allows remote attackers to obtain sensitive information or cause a denial of service v... | 9.1 - CRITICAL | 2018-09-07 | 2023-11-07 |
Known software with vulnerabilities from Octoprint
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Octoprint | Octoprint | 0.1.0 |