Cross-site Scripting (XSS)

2022-05-2004:17:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

octoprint

cross-site scripting

validation

redirect_url

views.py

malicious javascript

vulnerability

EPSS

0.002

Percentile

56.5%

JSON

OctoPrint is vulnerable to cross-site scripting. The vulnerability exists due to the lack of validation in the redirect_url parameter in the login function of views.py, allowing an attacker to inject and execute malicious javascript by redirecting to malicious URLs.