Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-2888

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-937f-qh3w-6g87

OctoPrint vulnerable to Insufficient Session Expiration. If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists. This issue is fixed in version 1.8.3.

gitlab/pypi/OctoPrint/CVE-2022-2888

OctoPrint vulnerable to Insufficient Session Expiration. If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists. This issue is fixed in version 1.8.3.

pypa/octoprint/PYSEC-2022-282

If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.

pysec/PYSEC-2022-282

If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.