Cross-site Scripting (XSS) - Generic in octoprint/octoprint
Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0.
- Update to 1.8.0
Published Updated
PatchFirst · Latest vulnerabilities
octoprint vulnerabilities · Page 2
Vulnerabilities published for octoprint in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 24
Cross-site Scripting (XSS) - DOM in octoprint/octoprint
Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0.
- Update to 1.8.0
Published UpdatedCVE-2021-32561
OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.
- Update to 1.6.0
Published UpdatedCVE-2021-32560
The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.
- Update to 1.6.0
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.