Papercut: >> Papercut Ng >> 20.1.10 Security Vulnerabilities
PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled (a very common configuration).
CVSS Score
9.8
EPSS Score
0.888
Published
2023-08-04
An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the service from operating as expected.
CVSS Score
8.2
EPSS Score
0.024
Published
2023-07-25
Page 2