Authentication Bypass by Primary Weakness in octoprint/octoprint

An attacker can freely brute force username and password and can takeover any account. An attacker could easily guess user passwords and gain access to user and administrative accounts.

N/A

过多认证尝试的限制不恰当

OctoPrint 安全漏洞

OctoPrint是一个应用程序。提供了一个快速的Web界面，用于控制消费类3D打印机。 OctoPrint 存在安全漏洞，该漏洞源于登录界面缺少请求速率限制导致攻击者可以暴力破解用户名和密码实现接管任何账户，获取访问账户及管理账户的权限。

N/A

N/A