Description
This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/MF API calls.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PaperCut | PaperCut NG, PaperCut MF | < 23.0.7, < 22.1.5, < 21.2.14, < 20.1.10 | 23.0.7 |