| Package | Affected versions | Patched versions |
|---|---|---|
| octoprint | < 1.8.3 | 1.8.3 |
| octoprint | < 1.8.3 | 1.8.3 |
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists. This issue is fixed in version 1.8.3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free