{"action":"Upgrade octoprint to 1.8.3 or later.","affected":[{"fixed":"1.8.3","introduced":"0"}],"component":"octoprint","cve_ids":["CVE-2022-2888"],"ecosystem":"PyPI","epss":0.00295,"exploited":false,"fixed_versions":["1.8.3"],"ghsa_id":"GHSA-937f-qh3w-6g87","id":"tcs_01M5KGGZC9H50BKFBYK4YEBE6A","modified_at":"2026-06-10T17:02:26.075371290Z","published_at":"2022-09-21T12:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-282","https://github.com/octoprint/octoprint/commit/40e6217ac1a85cc5ed592873ae49db01d3005da4","https://huntr.dev/bounties/d27d232b-2578-4b32-b3b4-74aabdadf629","https://github.com/advisories/GHSA-937f-qh3w-6g87"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-282","url":"https://osv.dev/vulnerability/PYSEC-2022-282"}],"summary":"If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists."}