Lucene search
PRIOn knowledge basePRION:CVE-2023-2533HistoryJun 20, 2023 - 3:15 p.m.
Cross site request forgery (csrf)
2023-06-2015:15:00
PRIOn knowledge base
www.prio-n.com
2
cross-site request forgery
papercut ng/mf
security settings alteration
arbitrary code execution
administrator deception
unauthorized changes
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in
PaperCut NG/MF, which, under specific conditions, could potentially enable
an attacker to alter security settings or execute arbitrary code. This could
be exploited if the target is an admin with a current login session. Exploiting
this would typically involve the possibility of deceiving an admin into clicking
a specially crafted malicious link, potentially leading to unauthorized changes.
| CPE | Name | Operator | Version |
|---|---|---|---|
| papercut_mf | eq | 22.0.10 | |
| papercut_ng | eq | 22.0.10 |
