Approved changes feed: RSS · Atom

cpe:2.3:a:octoprint:octoprint/octoprint:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOctoprint (8c2b2c94-540e-5cf3-a995-f85d5bee9a46)
ProductOctoprint/Octoprint (e48626c7-8e9e-5537-98db-bcccd176cac1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3607 vulnerable 2026-06-08 05:48:21.537876 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprint
MEDIUM (6)
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.
Published: 2022-10-19T00:00:00.000Z
Updated: 2025-05-09T14:47:37.533Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3068 vulnerable 2026-06-08 05:47:19.123026 Improper Privilege Management in octoprint/octoprint
MEDIUM (5.3)
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3.
Published: 2022-09-21T11:55:09.000Z
Updated: 2025-05-28T15:21:53.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2930 vulnerable 2026-06-08 05:43:36.753686 Unverified Password Change in octoprint/octoprint
MEDIUM (5.3)
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.
Published: 2022-08-22T11:35:11.000Z
Updated: 2024-08-03T00:53:00.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2888 vulnerable 2026-06-08 05:43:36.668016 Insufficient Session Expiration in octoprint/octoprint
MEDIUM (4.4)
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.
Published: 2022-09-21T11:25:08.000Z
Updated: 2025-05-28T15:22:09.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2872 vulnerable 2026-06-08 05:43:36.648065 Unrestricted Upload of File with Dangerous Type in octoprint/octoprint
LOW (3.7)
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3.
Published: 2022-09-21T09:55:08.000Z
Updated: 2025-05-28T15:26:59.092Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2822 vulnerable 2026-06-08 05:43:36.554381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1432 vulnerable 2026-06-08 05:39:13.153395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1430 vulnerable 2026-06-08 05:39:13.151443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.