Launch Week Day 1: Announcing Security Design Review
MEDIUM 4.4 PyPI

OctoPrint vulnerable to Insufficient Session Expiration.

GHSA-937f-qh3w-6g87 · CVE-2022-2888 · PYSEC-2022-282

Published · Modified

Description

If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists. This issue is fixed in version 1.8.3.

Ready to move

Start Securing

Free, no credit card | First findings in minutes