CVE-2022-2872

Name of the Vulnerable Software and Affected Versions OctoPrint versions prior to 1.8.3

Description The issue is related to the unrestricted upload of files with dangerous types. Due to a misconfiguration in the move file functionality, an attacker could change the file extension of an uploaded malicious file disguised as a .gcode file.

Recommendations For versions prior to 1.8.3, update to version 1.8.3 to resolve the issue. As a temporary workaround, consider restricting the upload functionality to prevent malicious file uploads until the patch is applied.