Known vulnerabilities in OctoPrint

Software: OctoPrint
Software CPE: cpe:2.3:a:octoprint.org:octoprint:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OctoPrint OctoPrint is affected by 10 known vulnerabilities: 10 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118151 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-64187
CWE-79 Low
No
No
1.11.4 06.11.2025 SB2025110618
#VU100038 - Missing Authentication for Critical Function
CVE-2024-51493
CWE-306 Low
No
No
1.10.3 07.11.2024 SB2024110715
#VU100036 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-49377
CWE-79 Low
No
No
1.10.3 07.11.2024 SB2024110715
#VU81950 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-41047
CWE-94 Low
No
No
1.9.3 12.10.2023 SB2023101246
#VU66690 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Low
No
No
1.8.2 22.08.2022 SB2022082217
#VU66689 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-1430
CWE-79 Low
No
No
1.8.0 22.08.2022 SB2022082216
#VU66688 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-1432
CWE-79 Low
No
No
1.8.0 22.08.2022 SB2022082216
#VU63628 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.8.1 25.05.2022 SB2022052505
#VU53326 - Improper Access Control
CVE-2021-32560
CWE-284 Low
No
No
1.6.0 18.05.2021 SB2021051803
#VU53323 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32561
CWE-79 Low
No
No
1.6.0 18.05.2021 SB2021051803