octoprint vulnerabilities

The snappy web interface for your 3D printer

1.11.3

6 years ago

10 days ago

Known vulnerabilities in the octoprint package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Command Injection	[,1.11.3)
H Improper Neutralization	[,1.11.2)
M External Control of File Name or Path	[,1.11.2)
M User Impersonation	[,1.11.0)
M Cross-site Scripting (XSS)	[,1.10.3)
M Unverified Password Change	[,1.10.3)
H Authentication Bypass by Spoofing	[,1.10.1)
M Cross-site Scripting (XSS)	[,1.10.0rc3)
M Cross-site Request Forgery (CSRF)	[,1.8.3)
M Unverified Password Change	[,1.10.0rc1)
M Open Redirect	[,1.8.2)
M Improper Neutralization of Special Elements Used in a Template Engine	[,1.9.3)
M Special Element Injection	[,1.8.3)
M Privilege Escalation	[,1.8.3)
M Insufficient Session Expiration	[,1.8.3)
L Arbitrary File Upload	[,1.8.3)
M Unverified Password Change	[,1.8.3)
L Improper Restriction of Excessive Authentication Attempts	[,1.8.3)
M Cross-site Scripting (XSS)	[0,1.8.1)
M Cross-site Scripting (XSS)	[,1.8.0)
M Cross-site Scripting (XSS)	[,1.8.0)
M Cross-site Scripting (XSS)	[,1.8.0)
M Cross-site Scripting (XSS)	[,1.8.0)
M Cross-site Scripting (XSS)	[,1.6.0)
L Improper Access Control	[,1.6.0)

77 VERSIONS IN TOTAL