octoprint vulnerabilities (PyPI)
24 vulnerabilities.
-
octoprintPyPI OctoPrint: File exfiltration possible via query parameters on upload endpoints 7.0 High -
octoprintPyPI OctoPrint: XSS in Suppressed Command Notifications 4.6 Medium -
octoprintPyPI OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication 6.0 Medium -
octoprintPyPI OctoPrint is vulnerable to XSS through Action Command Notifications and Prompts 4.6 Medium -
octoprintPyPI OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload 7.5 High -
octoprintPyPI OctoPrint Vulnerable to Denial of Service through malformed HTTP request 6.5 Medium -
octoprintPyPI OctoPrint vulnerable to possible file extraction via upload endpoints 5.4 Medium -
octoprintPyPI OctoPrint Authenticated Reverse Proxy Page Authentication Bypass 4.3 Medium -
octoprintPyPI API key access in settings without reauthentication in OctoPrint 5.3 Medium -
octoprintPyPI Jinja2 Templates are vulnerable to XSS attacks due to their configuration in OctoPrint 5.5 Medium -
octoprintPyPI OctoPrint Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabled 7.1 High -
octoprintPyPI OctoPrint XSS via the "Snapshot Test" feature in Classic Webcam plugin settings 4.0 Medium -
octoprintPyPI OctoPrint Unverified Password Change via Access Control Settings 4.2 Medium -
octoprintPyPI Improper Neutralization of Special Elements Used in a Template Engine in OctoPrint 6.2 Medium -
octoprintPyPI Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprint 6.0 Medium -
octoprintPyPI Improper Privilege Management in octoprint/octoprint 5.3 Medium -
octoprintPyPI Insufficient Session Expiration in octoprint/octoprint 4.4 Medium -
octoprintPyPI Unrestricted Upload of File with Dangerous Type in octoprint/octoprint 3.7 Low -
octoprintPyPI Unverified Password Change in octoprint/octoprint 5.3 Medium -
octoprintPyPI Authentication Bypass by Primary Weakness in octoprint/octoprint 3.7 Low -
octoprintPyPI Cross-site Scripting (XSS) - Generic in octoprint/octoprint 7.5 High -
octoprintPyPI Cross-site Scripting (XSS) - DOM in octoprint/octoprint 7.5 High -
octoprintPyPI OctoPrint API Error Messages vulnerable to XSS 6.1 Medium -
octoprintPyPI OctoPrint Incorrect Access Control 6.5 Medium