Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for remote code execution on the server hosting the PaperCut NG/MF application server.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
7.2HIGH3.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Product Status

Learn more

Versions 4 Total

Default Status: affected

affected

  • affected from 0 before 23.0.7 

    • unaffected from 23.0.7 

  • affected from 0 before 22.1.5 

    • unaffected from 22.1.5 

  • affected from 0 before 21.2.14 

    • unaffected from 21.2.14 

  • affected from 0 before 20.1.10 

    • unaffected from 20.1.10 

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.

Authorized Data Publishers

Learn more