Session Fixation In octoprint
Description
OctoPrint vulnerable to Insufficient Session Expiration. If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists. This issue is fixed in version 1.8.3.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 pypi | 1.8.3 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.