Skip to content
OpenAdvisories
High · 7.2 CVE-2024-1654 EUVD-2024-17389GHSA-hv4j-7wh2-m4p5

Unauthorized write operations in PaperCut NG/MF

Published Mar 14, 2024 · Updated Aug 1, 2024 · Assigned by PaperCut

Description

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this.

Affected products

VendorProductAffectedFixed
PaperCut PaperCut NG, PaperCut MF < 23.0.7, < 22.1.5, < 21.2.14, < 20.1.10 23.0.7

References