CVE-2023-31046

A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only access to the server's filesystem, because requests beginning with "GET /ui/static/..//.." reach...

Path traversal

A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only access to the server's filesystem, because requests beginning with "GET /ui/static/..//.." reach...

CVE-2023-31046

A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only access to the server's filesystem, because requests beginning with "GET /ui/static/..//.." reach...

CVE-2023-31046

The CVE-2023-31046 issue affects PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. It is a Path Traversal vulnerability where, under certain conditions, an authenticated attacker could obtain read‑only access to the server filesystem by crafting requests like GET /ui/static/..//.., which r...

CVE-2023-31046

A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only access to the server's filesystem, because requests beginning with "GET /ui/static/..//.." reach...

PaperCut NG < 20.1.9 / 21.x < 21.2.13 / 22.x < 22.1.3 Multiple Vulnerabilities

The version of PaperCut NG installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - An authentication bypass exists that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut host’s file storage. This could exhaust system...

PaperCut NG Path Traversal/File Upload RCE (CVE-2023-39143)

Binary data papercutngcve-2023-39143.nbin...

PaperCut NG Installed (Windows)

Binary data papercutngwininstalled.nbin...

CVE-2023-4568

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...

CVE-2023-4568

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...

Design/Logic Flaw

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...

CVE-2023-4568 PaperCut NG Unauthenticated XMLRPC

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...

CVE-2023-4568

CVE-2023-4568 – PaperCut NG Unauthenticated XMLRPC : Multiple sources confirm PaperCut NG is vulnerable to unauthenticated XML-RPC commands that can be run by default. Affected versions are 22.0.12 and earlier; newer builds may also be affected due to lack of vendor patching. The underlying issue...

CVE-2023-4568 PaperCut NG Unauthenticated XMLRPC

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch...

PaperCut NG Authorization Issues Vulnerability

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. An authorization issue vulnerability exists in PaperCut NG versions 22.0.12 and earlier, which stems from a default that allows unauthenticated XMLRPC commands to be run...

PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The specific flaw exists within the External User Lookup functionality. The issue results from the lack of proper validation of ...

PaperCut NG FileUploadAuthenticationFilter Authentication Bypass (CVE-2023-3486)

Binary data papercutngcve-2023-3486.nbin...

Papercut PaperCut MF and PaperCut NG Path Traversal Vulnerabilities

Papercut PaperCut MF is a suite of multifunction printer control software from Papercut Australia.PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. A security vulnerability exists in PaperCut NG and PaperCut MF that stems from a path traversal vulnerabili...

CVE-2023-39143

PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled a very common configuration...

PT-2023-26803 · Papercut · Papercut Ng +1

Name of the Vulnerable Software and Affected Versions: PaperCut NG and PaperCut MF versions prior to 22.1.3 Description: The issue allows path traversal, enabling attackers to upload, read, or delete arbitrary files, leading to remote code execution when external device integration is enabled. Th...