Cross-site Scripting (XSS) - Generic in octoprint/octoprint
Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0.
- Actualiza a 1.8.0
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para octoprint en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 24
Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0.
Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0.
OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.
The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.