CVE-2022-2930

Description

Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.

How to fix CVE-2022-2930

To remediate CVE-2022-2930, upgrade the affected package to a fixed version below.

• PyPI/octoprint—upgrade to 1.8.3 or later
• PyPI/octoprint—upgrade to 1453076ee3e47fcab2dc73664ec2d61d3ef7fc4f or later

Is CVE-2022-2930 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 1.8.3
• from 0, < 1453076ee3e47fcab2dc73664ec2d61d3ef7fc4f | from 0, < 1.8.3

CVSS scores

References (6)

• ADVISORYgithub.com/advisories/GHSA-39gf-864w-pxw4
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-2930
• PATCHgithub.com/octoprint/octoprint
• WEBgithub.com/octoprint/octoprint/commit/1453076ee3e47fcab2dc73664ec2d61d3ef7fc4f