CVSS 3.1
4.4 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:NCVE-2022-2888
Medium (4.4) in octoprint octoprint. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in octoprint 1.8.3.
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
- CWE
- CWE-613
- Published
- Modified
- Record from
- the NVD, synced
Affected
- octoprint:octoprint
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-937f-qh3w-6g87 | PyPI | octoprint | <1.8.3 | 1.8.3 |
| PYSEC-2022-282 | PyPI | octoprint | <1.8.3 | 1.8.3 |