Description
OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | octoprint | < 1.6.0 | 1.6.0 | GHSA-vcx4-fpmp-mvv6 |
Medium · 6.1
CVE-2021-32561
EUVD-2021-0155GHSA-vcx4-fpmp-mvv6PYSEC-2021-30
OctoPrint API Error Messages vulnerable to XSS
Published May 11, 2021 · Updated Aug 3, 2024 · Assigned by mitre