Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-937f-qh3w-6g87: OctoPrint vulnerable to Insufficient Session Expiration.

If an attacker comes into the possession of a victim’s OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim’s account exists. This issue is fixed in version 1.8.3.

ghsa
#git#auth

OctoPrint vulnerable to Insufficient Session Expiration.

Moderate severity GitHub Reviewed Published Sep 22, 2022 • Updated Sep 23, 2022

ghsa: Latest News

GHSA-486g-47cc-8wxf: aiocpa contains credential harvesting code