The vulnerability of the “static-content-files” component of the PaperCut MF and PaperCut NG software management printing infrastructure allows a intruder to gain unauthorized access to protected information.

The vulnerability of the “static-content-files” component in the PaperCut MF and PaperCut NG software for managing print infrastructure is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker operating remotely to gain...

Path traversal

A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only access to the server's filesystem, because requests beginning with "GET /ui/static/..//.." reach...