CVE-2022-2930

Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.

Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.

Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.

Versions of OctoPrint prior to 1.8.3 did not require the current user password in order to change that users password. As a result users could be locked out of their accounts or have their accounts stolen under certain circumstances.

Un Cambio de Contraseña no Verificado en el repositorio de GitHub octoprint/octoprint versiones anteriores a 1.8.3.