CVE-2018-16710

CVE-2018-16710 describes a critical information disclosure and denial-of-service vulnerability affecting OctoPrint versions through 1.3.9, stemming from HTTP requests on port 8081. With a CVSS score of 9.1, this vulnerability is easily exploitable remotely without authentication, potentially leading to complete compromise of confidentiality and availability. Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion, and the vendor disputes its significance when OctoPrint is exposed to the public internet against their recommendations.