OctoPrint API Error Messages vulnerable to XSS

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-32561 · ADVISORY
• OctoPrint/OctoPrint · PACKAGE
• OctoPrint/OctoPrint release 1.6.0 · WEB
• pypa/advisory-database · WEB
• octoprint.org/blog/2021/04/27/new-release-1.6.0 · WEB
• brzozowski.io · WEB
• brzozowski.io/web-applications/2021/05/11/the-insecure-story-of-octoprint.html · WEB
• octoprint.org/blog/2021/04/27/new-release-1.6.0 · Release Notes
• GitHub Advisory GHSA-vcx4-fpmp-mvv6 · ADVISORY

Lỗ hổng khác của octoprint

• CVE-2026-54134CAO 7.0OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload han…
• CVE-2026-35163TRUNG BÌNH 4.6OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, Suppressed Command notification popup…
• CVE-2026-23892TRUNG BÌNH 5.9OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up to and including 1.11.5 are affected by a (th…
• CVE-2025-64187TRUNG BÌNH 4.4OctoPrint provides a web interface for controlling consumer 3D printers. Versions 1.11.3 and below are affected by a vulnerability that allo…
• CVE-2025-58180CAO 8.8OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.2 contain a vulnerab…