{"action":"Upgrade octoprint to 1.8.3 or later.","affected":[{"fixed":"1.8.3","introduced":"0"}],"component":"octoprint","cve_ids":["CVE-2022-2872"],"ecosystem":"PyPI","epss":0.00697,"exploited":false,"fixed_versions":["1.8.3"],"ghsa_id":"GHSA-49wm-4fp6-h59c","id":"tcs_01M5KEXTMKJ70DZAP9QSAMRCQC","modified_at":"2024-10-07T21:36:48.462736Z","published_at":"2022-09-22T00:00:32Z","references":["https://osv.dev/vulnerability/GHSA-49wm-4fp6-h59c","https://nvd.nist.gov/vuln/detail/CVE-2022-2872","https://github.com/octoprint/octoprint/commit/3e3c11811e216fb371a33e28412df83f9701e5b0","https://github.com/octoprint/octoprint","https://github.com/pypa/advisory-database/tree/main/vulns/octoprint/PYSEC-2022-286.yaml","https://huntr.dev/bounties/b966c74d-6f3f-49fe-b40a-eaf25e362c56"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-49wm-4fp6-h59c","url":"https://osv.dev/vulnerability/GHSA-49wm-4fp6-h59c"}],"summary":"OctoPrint vulnerable to Unrestricted Upload of File with Dangerous Type"}