Fluid Attacks Database

Description

OctoPrint Incorrect Access Control The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not *.log files.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
pypi	octoprint	>=0 <1.6.0	1.6.0

Aliases

1. CVE-2021-325602. NVD-2021-325603. OSV-2021-325604. GCVE-2021-32560

References

1. https://github.com/OctoPrint/OctoPrint/releases/tag/1.6.02. https://github.com/pypa/advisory-database/tree/main/vulns/octoprint/PYSEC-2021-29.yaml3. https://octoprint.org/blog/2021/04/27/new-release-1.6.04. https://www.brzozowski.io5. https://www.brzozowski.io/web-applications/2021/05/11/the-insecure-story-of-octoprint.html

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.