Skip to content
OpenAdvisories
High · 7.2 CVE-2024-1882 EUVD-2024-17607GHSA-gmmm-pvv4-ww8g

Server-side resource injection in PaperCut NG/MF

Published Mar 14, 2024 · Updated Sep 26, 2024 · Assigned by PaperCut

Description

This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for remote code execution on the server hosting the PaperCut NG/MF application server.

Affected products

VendorProductAffectedFixed
PaperCut PaperCut NG, PaperCut MF < 23.0.7, < 22.1.5, < 21.2.14, < 20.1.10 23.0.7

References