Description (CNA)
An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the service from operating as expected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PaperCut / PaperCut NG | affected 0 before 22.1.3 |
CWE
CWE-434
References
- https://www.tenable.com/security/research/tra-2023-23
- https://www.papercut.com/kb/Main/SecurityBulletinJuly2023/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.