CVE-2022-3607

Medium

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to…

@huntrdev·CWE-74·Published 2022-10-19

CVSS

6.0

EPSS

0.00

KEV

Exploits

cve.orgen

144 chars

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.

NVDen

144 chars

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.

OSV.deven

144 chars

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.

GHSAen

68 chars

OctoPrint prior to 1.8.3 is vulnerable to Special Element Injection.

NVDes

179 chars

Un Fallo en el Saneo de Elementos Especiales en un Plano Diferente (Inyección de Elementos Especiales) en el repositorio de GitHub octoprint/octoprint versiones anteriores a 1.8.3

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	6.0	—	—	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
3.0	Primary	cve.org	6.0	—	—	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
3.0	Secondary	NVD	6.0	1.5	4.0	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
3.1	Primary	NVD	6.0	1.5	4.0	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
3.1	Secondary	GHSA	6.0	—	—	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
4.0	Secondary	GHSA	6.1	—	—	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N