CVE-2022-3607: falha de média gravidade em octoprint/octoprint
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprint
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6epss 0.4%
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
octoprint · octoprint/octoprintCVEs relacionadas — octoprint/octoprint
No mesmo produto, das mais perigosas para as menos.
CVE-2022-1430HIGHCross-site Scripting (XSS) - DOM in octoprint/octoprintEPSS 1.4%CVE-2022-1432HIGHCross-site Scripting (XSS) - Generic in octoprint/octoprintEPSS 1.2%CVE-2022-2822LOWAuthentication Bypass by Primary Weakness in octoprint/octoprintEPSS 0.9%CVE-2022-2872LOWUnrestricted Upload of File with Dangerous Type in octoprint/octoprintEPSS 0.7%CVE-2022-3068MEDIUMImproper Privilege Management in octoprint/octoprintEPSS 0.5%CVE-2022-2930MEDIUMUnverified Password Change in octoprint/octoprintEPSS 0.3%