CVE-2021-32561

OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters

published May 11, 2021

CVSS
—
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01152 · 66.7th percentile
Published
2021-05-11T13:38Z
EPSS history
Timeline
  • 11 MAY 13:38Z
    OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters
    cvelistv5