CVE-2022-2872

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-2872

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-2872.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-2872

Aliases

Published

2022-09-21T09:55:08Z

Modified

2026-07-08T06:01:01.649480095Z

Severity

3.7 (Low) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N CVSS Calculator

Summary

Unrestricted Upload of File with Dangerous Type in octoprint/octoprint

Details

Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2872.json",
    "cna_assigner": "@huntrdev",
    "cwe_ids": [
        "CWE-434"
    ]
}

References

Affected packages

Git / github.com/octoprint/octoprint

Affected ranges

Type

GIT

Repo

https://github.com/octoprint/octoprint

Events

Introduced

Fixed

d0d226f3e0ad0a6436e4f32519bf38a82aa576ca

Fixed

3e3c11811e216fb371a33e28412df83f9701e5b0

Database specific

{
    "cpe": "cpe:2.3:a:octoprint:octoprint:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.8.3"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

1.*

1.1.0-dev

1.2.0

1.2.0-dev

1.2.0-rc1

1.2.0-rc2

1.2.0-rc3

1.2.1

1.2.10

1.2.11

1.2.12

1.2.13

1.2.14

1.2.15

1.2.16

1.2.16rc1

1.2.16rc2

1.2.17rc1

1.2.17rc2

1.2.17rc3

1.2.18

1.2.18rc1

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.4.0rc1

1.4.0rc2

1.4.0rc3

1.4.0rc4

1.4.0rc5

1.4.0rc6

1.5.0

1.5.0rc1

1.5.0rc2

1.5.0rc3

1.5.1

1.5.2

1.5.3

1.6.1

1.7.1

1.7.2

1.7.3

1.8.0

1.8.1

1.8.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-2872.json"