PyPI/octoprint CVE-2022-1432: high 7.5, EPSS 1.23%

Cross-site Scripting in OctoPrint

Action: Upgrade octoprint to 1.8.0 or later.

pip install octoprint==1.8.0

Affected

Fixed versions

Sources

• osv: GHSA-h8pc-j334-jjhm
• https://nvd.nist.gov/vuln/detail/CVE-2022-1432
• https://github.com/octoprint/octoprint/commit/6d259d7e6f5b0de9a1c762831537a386e53978d3
• https://github.com/advisories/GHSA-h8pc-j334-jjhm
• https://github.com/octoprint/octoprint
• https://github.com/pypa/advisory-database/tree/main/vulns/octoprint/PYSEC-2022-201.yaml
• https://huntr.dev/bounties/cb545c63-a3c1-4d57-8f06-e4593ab389bf

CVE-2022-1432 · published 2022-05-19T00:00:30Z · modified 2024-10-07T21:35:05.533993Z · JSON