OctoPrint API Error Messages vulnerable to XSS

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-32561 · ADVISORY
• OctoPrint/OctoPrint · PACKAGE
• OctoPrint/OctoPrint release 1.6.0 · WEB
• pypa/advisory-database · WEB
• octoprint.org/blog/2021/04/27/new-release-1.6.0 · WEB
• brzozowski.io · WEB
• brzozowski.io/web-applications/2021/05/11/the-insecure-story-of-octoprint.html · WEB
• octoprint.org/blog/2021/04/27/new-release-1.6.0 · Release Notes
• GitHub Advisory GHSA-vcx4-fpmp-mvv6 · ADVISORY

octoprint のその他の脆弱性

• CVE-2026-54134高 7.0OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload han…
• CVE-2026-35163中 4.6OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popup…
• CVE-2026-23892中 5.9OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up to and including 1.11.5 are affected by a (th…
• CVE-2025-64187中 4.4OctoPrint provides a web interface for controlling consumer 3D printers. Versions 1.11.3 and below are affected by a vulnerability that allo…
• CVE-2025-58180高 8.8OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.2 contain a vulnerab…