GHSA-hm3x-g6w7-68c6MediumCVSS 7.3
A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown...
🔗 CVE IDs covered (1)
📋 Description
A security vulnerability has been detected in OctoPrint 1.0.0/1.1.0. Affected is an unknown function of the component Flask Secret Key Handler. Such manipulation leads to use of hard-coded cryptographic key . The attack may be performed from remote. Upgrading to version 1.11.1 is able to address this issue. The name of the patch is b4699825d6ab92d5451e5b1e3a06dfb81f86e777. The affected component should be upgraded.
🔗 References (9)
- https://nvd.nist.gov/vuln/detail/CVE-2014-125135
- https://github.com/OctoPrint/OctoPrint/commit/b4699825d6ab92d5451e5b1e3a06dfb81f86e777
- https://github.com/OctoPrint/OctoPrint
- https://github.com/OctoPrint/OctoPrint/releases/tag/1.11.1
- https://vuldb.com/cve/CVE-2014-125135
- https://vuldb.com/submit/994545
- https://vuldb.com/vuln/426129
- https://vuldb.com/vuln/426129/cti
- https://github.com/advisories/GHSA-hm3x-g6w7-68c6