Security Advisory
CVE-2022-2888
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
If an attacker comes into the possession of a victims OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victims account exists.