CVE-2023-27351

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

PaperCut MF SecurityRequestFilter Authentication Bypass (CVE-2023-27351)

Binary data papercutmfcve-2023-27351.nbin...

PaperCut NG SecurityRequestFilter Authentication Bypass (CVE-2023-27351)

Binary data papercutngcve-2023-27351.nbin...

Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p Ransomware

Microsoft has confirmed that the active exploitation of PaperCut servers is linked to attacks that are designed to deliver Cl0p and LockBit ransomware families. The tech giant's threat intelligence team is attributing a subset of the intrusions to a financially motivated actor it tracks under the...

CVE-2023-27351

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

CVE-2023-27351

PaperCut NG 22.0.5 (Build 63914) contains an authentication bypass vulnerability in the SecurityRequestFilter class due to improper implementation of the authentication algorithm. This allows remote attackers to bypass authentication without user interaction. Evidence across multiple sources (ZDI...