Cross-site Scripting in OctoPrint

높음 7.5CVE-2022-1430 · GHSA-x7r7-wmj8-vv5g · PYSEC-2022-200 · Published 18/05/2022 · updated 17/06/2026

요약

CVE-2022-1430은(는) octoprint, octoprint (octoprint)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.4%, 전체 취약점의 71.8%보다 높음.
조치: 1.8.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
octoprint PyPI	`< 1.8.0`	`1.8.0`
octoprint octoprint	`< 1.8.0`	`1.8.0`

Description

Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. The login endpoint allows for javascript injection which may lead to account takeover in a phishing scenario.

NVD description

Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0.

References

nvd.nist.gov/vuln/detail/CVE-2022-1430 · ADVISORY
octoprint/octoprint commit 8087528 · WEB
GitHub Advisory GHSA-x7r7-wmj8-vv5g · ADVISORY
octoprint/octoprint · PACKAGE
pypa/advisory-database · WEB
huntr.dev/bounties/0cd30d71-1e32-4a0b-b4c3-faaa1907b541 · WEB

octoprint의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

octoprint

PyPI

< 1.8.0

1.8.0

octoprint

< 1.8.0

1.8.0

Description

Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. The login endpoint allows for javascript injection which may lead to account takeover in a phishing scenario.

NVD description

Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0.

octoprint의 다른 취약점

모두 보기 →