Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-937f-qh3w-6g87: OctoPrint vulnerable to Insufficient Session Expiration.

If an attacker comes into the possession of a victim’s OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim’s account exists. This issue is fixed in version 1.8.3.

ghsa
#git#auth

OctoPrint vulnerable to Insufficient Session Expiration.

Moderate severity GitHub Reviewed Published Sep 22, 2022 • Updated Sep 23, 2022

ghsa: Latest News

GHSA-wv8j-m3hx-924j: Arrow2 allows out of bounds access in public safe API