{"action":"Upgrade octoprint to 1.10.3 or later.","affected":[{"fixed":"1.10.3","introduced":"0"}],"component":"octoprint","cve_ids":["CVE-2024-51493"],"ecosystem":"PyPI","epss":0.00281,"exploited":false,"fixed_versions":["1.10.3"],"ghsa_id":"GHSA-cc6x-8cc7-9953","id":"tcs_01M5KFCNWG13SFS2245BVN9FBE","modified_at":"2025-01-21T18:23:41.960151Z","published_at":"2024-11-05T15:08:57Z","references":["https://osv.dev/vulnerability/GHSA-cc6x-8cc7-9953","https://github.com/OctoPrint/OctoPrint/security/advisories/GHSA-cc6x-8cc7-9953","https://nvd.nist.gov/vuln/detail/CVE-2024-51493","https://github.com/OctoPrint/OctoPrint/commit/9bc80d782d72881b16e20873dcd0b8314324c70c","https://github.com/OctoPrint/OctoPrint","https://github.com/pypa/advisory-database/tree/main/vulns/octoprint/PYSEC-2024-202.yaml"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-cc6x-8cc7-9953","url":"https://osv.dev/vulnerability/GHSA-cc6x-8cc7-9953"}],"summary":"OctoPrint has API key access in settings without reauthentication"}