Lucene search

@huntrdevCVE-2022-2930

HistoryAug 22, 2022 - 12:15 p.m.

CVE-2022-2930

2022-08-2212:15:09

CWE-620

@huntrdev

web.nvd.nist.gov

cve-2022-2930

github

octoprint

nvd

security vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.8%

JSON

Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.

Affected configurations

Nvd

Node

octoprintoctoprintRange<1.8.3

VendorProductVersionCPE
octoprintoctoprint*cpe:2.3:a:octoprint:octoprint:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
octoprint	octoprint	*	cpe:2.3:a:octoprint:octoprint::::::::

CNA Affected

[
  {
    "product": "octoprint/octoprint",
    "vendor": "octoprint",
    "versions": [
      {
        "lessThan": "1.8.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/octoprint/octoprint/commit/1453076ee3e47fcab2dc73664ec2d61d3ef7fc4f

huntr.dev/bounties/da6745e4-7bcc-4e9a-9e96-0709ec9f2477

Social References

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.8%

JSON

Related for CVE-2022-2930