Threats affecting pkg:github/octoprint/OctoPrint

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.4	EPSS 0.3%	CVE-2025-48067OctoPrint · External Control of File Name or Path Medium5.4EPSS 0.3%2025-06-10CVE Database V5CVE-2025-48067 OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows an attacker with the FILE_UPLOAD permission to exfiltrate files from the host that OctoPrint has read access to, by moving them into the upload folder where they then can be downloaded from. This vulnerability is fixed in 1.11.2. EPSS 0.3%Vulnerability CWE-73	CVE Database V5	2025-06-10
Medium	5.3	EPSS 0.5%	CVE-2022-3068octoprint/octoprint · Improper Privilege Management Medium5.3EPSS 0.5%2022-09-21CVE Database V5CVE-2022-3068 Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3. EPSS 0.5%Vulnerability CWE-269	CVE Database V5	2022-09-21
Low	3.7	EPSS 0.7%	CVE-2022-2872octoprint/octoprint · Unrestricted File Upload Low3.7EPSS 0.7%2022-09-21CVE Database V5CVE-2022-2872 Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3. EPSS 0.7%Vulnerability CWE-434	CVE Database V5	2022-09-21

Page 1 of 1