CVE-2025-64187 | OctoPrint up to 1.11.3 File cross site scripting (GHSA-crvm-xjhm-9h29)

November 7, 2025 Yanac

A vulnerability has been found in OctoPrint up to 1.11.3 and classified as problematic. The impacted element is an unknown function of the component File Handler. The manipulation leads to basic cross site scripting.

This vulnerability is documented as CVE-2025-64187. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More