Homepage
About Snyk

octoprint@1.10.2 vulnerabilities

The snappy web interface for your 3D printer

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the octoprint package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Cross-site Scripting (XSS)

OctoPrint is a snappy web interface for your 3D printer

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the Jinja2 template system. An attacker can retrieve or modify sensitive configuration settings, interrupt prints, or otherwise interact with the instance maliciously.

Note: The attacker has to redirect a victim to a specially crafted link or persuade the victim to click through a malicious third-party app

How to fix Cross-site Scripting (XSS)?

Upgrade OctoPrint to version 1.10.3 or higher.

[,1.10.3)
  • M
Unverified Password Change

OctoPrint is a snappy web interface for your 3D printer

Affected versions of this package are vulnerable to Unverified Password Change due to improper authentication in the settings interface. An attacker can gain unauthorized access to API keys and potentially disrupt system operations by exploiting the lack of reauthentication requirements.

How to fix Unverified Password Change?

Upgrade OctoPrint to version 1.10.3 or higher.

[,1.10.3)
Go back to all versions of this package