CVE-2022-3607

MediumCVSS 6.0/10Last modified Jun 17, 2026

Description

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.

Metrics

CVSS 3.1 6.0/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-75CWE-74

Affected software

No affected versions have been published.

Timeline

Published
Oct 19, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-360707.3Poetry is a dependency manager for Python. To handle dependencies that come from a Git repository, Poetry executes various commands, e.g. `gCVE-2022-360718.1SFTPGo is configurable SFTP server with optional HTTP/S, FTP/S and WebDAV support. SFTPGo WebAdmin and WebClient support login using TOTP (TCVE-2022-360725.9SilverwareGames.io is a social network for users to play video games online. In version 1.1.8 and prior, due to an unobvious feature of PHP,CVE-2022-360738.8RubyGems.org is the Ruby community gem host. A bug in password & email change confirmation code allowed an attacker to change their RubyGemsCVE-2022-360747.5Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which faCVE-2022-360754.3Nextcloud files access control is a nextcloud app to manage access control for files. Users with limited access can see file names in certaiCVE-2022-360767.5NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unnecessarily strict conCVE-2022-360776.1The Electron framework enables writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 21.0.0-beta.CVE-2022-360787.5Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited tCVE-2022-360797.5Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Internal fields (keys used internallCVE-2022-36088.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha.CVE-2022-360806.1Wikmd is a file based wiki that uses markdown. Prior to version 1.7.1, an attacker could capture user's session cookies or execute malicious
CVE-2022-3607: Medium severity, CVSS 6.0 | Vulnix