CVE-2022-2888
pypi/OctoPrint
Insufficient Session Expiration
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.
All versions before 1.8.3
Upgrade to version 1.8.3 or above.
2022-09-23
source |