OctoPrint API Error Messages vulnerable to XSS
Moderate severity
GitHub Reviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Jul 13, 2023
Description
Published by the National Vulnerability Database
May 11, 2021
Published to the GitHub Advisory Database
May 24, 2022
Reviewed
Jul 13, 2023
Last updated
Jul 13, 2023
OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.
References