Repetier Server
Approved changes feed: RSS · Atom
cpe:2.3:a:repetier-server:repetier-server:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Repetier Server (f51fec6e-b43a-53ce-bf41-2b968da2d8b4) |
|---|---|
| Product | Repetier Server (2b2ebb3d-eb7b-5f2d-9a1e-31f610ba358c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/yadomi/repetier-server |
purl2cpe | 2026-06-01 10:11:08.853139 |
pkg:github/brokenstuff/repetier-server |
purl2cpe | 2026-06-01 10:11:08.853142 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-31061 |
vulnerable | 2026-06-08 06:04:41.738181 |
Details available
Repetier Server through 1.4.10 does not have CSRF protection.
Published: 2023-04-24T00:00:00.000Z
Updated: 2025-02-04T19:29:05.197Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31060 |
vulnerable | 2026-06-08 06:04:41.737631 |
Details available
Repetier Server through 1.4.10 executes as SYSTEM. This can be leveraged in conjunction with CVE-2023-31059 for full compromise.
Published: 2023-04-24T00:00:00.000Z
Updated: 2025-02-04T19:35:51.984Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31059 |
vulnerable | 2026-06-08 06:04:41.737065 |
Details available
Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLost.php.
Published: 2023-04-24T00:00:00.000Z
Updated: 2025-02-04T19:37:41.746Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14451 |
vulnerable | 2026-06-08 05:12:54.865987 |
Details available
RepetierServer.exe in Repetier-Server 0.8 through 0.91 does not properly validate the XML data structure provided when uploading a new printer configuration. When this is combined with CVE-2019-14450, an attacker can upload an "external command" configuration as a printer configuration, and achieve remote code execution. After exploitation, loading of the external command configuration is dependent on a system reboot or service restart.
Published: 2019-10-25T16:27:22.000Z
Updated: 2024-08-05T00:19:41.075Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14450 |
vulnerable | 2026-06-08 05:12:54.865563 |
Details available
A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allows for the creation of a user controlled XML file at an unintended location. When this is combined with CVE-2019-14451, an attacker can upload an "external command" configuration as a printer configuration, and achieve remote code execution. After exploitation, loading of the external command configuration is dependent on a system reboot or service restart.
Published: 2019-10-28T16:58:41.000Z
Updated: 2024-08-05T00:19:40.999Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.