Vulnerability Database
Blog
FAQ
Docs
PYSEC-2022-43142
See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/octoprint/PYSEC-2022-43142.yaml
JSON Data
https://api.test.osv.dev/v1/vulns/PYSEC-2022-43142
Aliases
CVE-2022-2930
GHSA-39gf-864w-pxw4
Published
2022-08-22T12:15:00Z
Modified
2024-11-21T14:59:35.451Z
Severity
7.8 (High)
CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
[none]
Details
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.
References
https://huntr.dev/bounties/da6745e4-7bcc-4e9a-9e96-0709ec9f2477
https://github.com/octoprint/octoprint/commit/1453076ee3e47fcab2dc73664ec2d61d3ef7fc4f
Affected packages
PyPI
/
octoprint
Package
Name
octoprint
View open source insights on deps.dev
Purl
pkg:pypi/octoprint
Affected ranges
Type
GIT
Repo
https://github.com/octoprint/octoprint
Events
Introduced
0
Unknown introduced commit / All previous commits are affected
Fixed
1453076ee3e47fcab2dc73664ec2d61d3ef7fc4f
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1.8.3
Affected versions
1.*
1.3.11
1.3.12rc1
1.3.12rc3
1.3.12
1.4.0rc1
1.4.0rc2
1.4.0rc3
1.4.0rc4
1.4.0rc5
1.4.0rc6
1.4.0
1.4.1rc1
1.4.1rc2
1.4.1rc3
1.4.1rc4
1.4.1
1.4.2
1.5.0rc1
1.5.0rc2
1.5.0rc3
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0rc1
1.6.0rc2
1.6.0rc3
1.6.0
1.6.1
1.7.0rc1
1.7.0rc2
1.7.0rc3
1.7.0
1.7.1
1.7.2
1.7.3
1.8.0rc1
1.8.0rc2
1.8.0rc3
1.8.0rc4
1.8.0rc5
1.8.0
1.8.1
1.8.2
PYSEC-2022-43142 - OSV