Vulnerabilities (CVE)

Filtered by vendor Octoprint Subscribe
Filtered by product Octoprint
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-1432 1 Octoprint 1 Octoprint 2022-05-25 4.6 MEDIUM 6.4 MEDIUM
Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0.
CVE-2021-32561 1 Octoprint 1 Octoprint 2021-05-26 4.3 MEDIUM 6.1 MEDIUM
OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.
CVE-2021-32560 1 Octoprint 1 Octoprint 2021-05-26 4.0 MEDIUM 6.5 MEDIUM
The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.