Media
CVE-2026-35163
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 24
Restablecer filtros
Alta
CVE-2026-54134
OctoPrint has possible file exfiltration via query parameters on upload endpoints
Media
CVE-2026-23892
OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication
Media
CVE-2025-64187
OctoPrint vulnerable to XSS in Action Commands Notification and Prompt
Alta
CVE-2025-58180
OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload
Media
CVE-2025-48067
OctoPrint vulnerable to possible file extraction via upload endpoints
Media
CVE-2025-48879
OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint
Baja
CVE-2022-2822
OctoPrint does not have rate limiting on the login page
Media
CVE-2025-32788
OctoPrint Authenticated Reverse Proxy Page Authentication Bypass
Media
CVE-2024-51493
OctoPrint has API key access in settings without reauthentication
Media
CVE-2024-49377
OctoPrint Vulnerable to Reflected XSS in Jinja2 Templates
Crítica
CVE-2024-32977
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.0 contain a vulnerability that allows an unauthenticated attacker to completely
Media
CVE-2024-28237
XSS via the "Snapshot Test" feature in Classic Webcam plugin settings
Media
CVE-2024-23637
OctoPrint Unverified Password Change via Access Control Settings
Alta
CVE-2023-41047
OctoPrint vulnerable to Improper Neutralization of Special Elements Used in a Template Engine
Media
CVE-2022-3607
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.
Baja
CVE-2022-2872
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3.
Alta
CVE-2022-3068
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3.
Media
CVE-2022-2888
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.
Alta
CVE-2022-2930
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.
Alta
CVE-2021-32560
The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.
Media
CVE-2021-32561
OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.
Alta
CVE-2022-1432
Cross-site Scripting in OctoPrint
Alta
CVE-2022-1430
Cross-site Scripting in OctoPrint
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.