Octoprint

Octoprint

27 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2024-51493

  • EPSS 0.28%
  • Veröffentlicht 05.11.2024 19:15:07
  • Zuletzt bearbeitet 18.12.2024 16:34:37

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain a vulnerability that allows an attacker that has gained temporary control over an authenticated victim's OctoPrint brows...

6.1

CVE-2024-49377

  • EPSS 0.27%
  • Veröffentlicht 05.11.2024 19:15:05
  • Zuletzt bearbeitet 18.12.2024 16:31:26

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain reflected XSS vulnerabilities in the login dialog and the standalone application key confirmation dialog. An attacker w...

9.4

CVE-2024-32977

Exploit
  • EPSS 0.9%
  • Veröffentlicht 14.05.2024 16:17:12
  • Zuletzt bearbeitet 10.04.2025 20:33:40

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.0 contain a vulnerability that allows an unauthenticated attacker to completely bypass the authentication if the `autologinLocal` ...

4.8

CVE-2024-28237

Exploit
  • EPSS 0.44%
  • Veröffentlicht 18.03.2024 22:15:07
  • Zuletzt bearbeitet 08.01.2025 16:22:58

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a w...

4.9

CVE-2024-23637

  • EPSS 0.52%
  • Veröffentlicht 31.01.2024 18:15:49
  • Zuletzt bearbeitet 21.11.2024 08:58:03

OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to change the password of other admin accounts, including their own, without having to repeat their pas...

6.5

CVE-2023-41047

  • EPSS 0.57%
  • Veröffentlicht 09.10.2023 16:15:10
  • Zuletzt bearbeitet 21.11.2024 08:20:27

OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows malicious admins to configure a specially crafted GCODE script that will allow code execution during rendering of that s...

6

CVE-2022-3607

Exploit
  • EPSS 0.42%
  • Veröffentlicht 19.10.2022 13:15:08
  • Zuletzt bearbeitet 21.11.2024 07:19:52

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.

8.8

CVE-2022-3068

Exploit
  • EPSS 0.46%
  • Veröffentlicht 21.09.2022 12:15:10
  • Zuletzt bearbeitet 21.11.2024 07:18:45

Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3.

4.4

CVE-2022-2888

Exploit
  • EPSS 0.29%
  • Veröffentlicht 21.09.2022 12:15:09
  • Zuletzt bearbeitet 21.11.2024 07:01:52

If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.

5.4

CVE-2022-2872

Exploit
  • EPSS 0.57%
  • Veröffentlicht 21.09.2022 10:15:09
  • Zuletzt bearbeitet 21.11.2024 07:01:50

Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3.