Cross-site Scripting (XSS) - Generic in octoprint/octoprint
Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0.
- Обновитесь до 1.8.0
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в octoprint опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 24
Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0.
Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0.
OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.
The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.