p PatchFirst

CVE-2022-2822

CVE-2022-2822 · Authentication Bypass by Primary Weakness in octoprint/octoprint

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess user passwords and gain access to user and administrative accounts.

CVSS 3.7 · Low · EPSS 0.9% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • octoprint/octoprint

    Versions
    • ≥ unspecified, < 1.9.0: Affected (custom)

    Update to 1.9.0

  • octoprint PyPI

    Versions
    • 1.3.11
    • 1.3.12
    • 1.3.12rc1
    • 1.3.12rc3
    • 1.4.0
    • 1.4.0rc1
    • 1.4.0rc2
    • 1.4.0rc3
    • 1.4.0rc4
    • 1.4.0rc5
    • 1.4.0rc6
    • 1.4.1
    • 1.4.1rc1
    • 1.4.1rc2
    • 1.4.1rc3
    • 1.4.1rc4
    • 1.4.2
    • 1.5.0
    • 1.5.0rc1
    • 1.5.0rc2
    • 1.5.0rc3
    • 1.5.1
    • 1.5.2
    • 1.5.3
    • 1.6.0
    • 1.6.0rc1
    • 1.6.0rc2
    • 1.6.0rc3
    • 1.6.1
    • 1.7.0
    • 1.7.0rc1
    • 1.7.0rc2
    • 1.7.0rc3
    • 1.7.1
    • 1.7.2
    • 1.7.3
    Affected ranges
    • ECOSYSTEM: ≤ 1.7.3

    No fix published

Original sources

Check your server →