Description (CNA)
An improper limitation of a pathname to a restricted directory (path traversal) vulnerability in the Scan-to-Fax component of PaperCut NG and PaperCut MF allows an authenticated administrator to execute arbitrary commands on the underlying host via crafted fax provider settings.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PaperCut / PaperCut NG/MF | affected 0 before 24.1.10; affected 25.0.0 before 25.0.13; affected 26.0.0 before 26.0.5 |
CWE
CWE-22, CWE-78
References
ADP enrichment
No English description supplied.
No references supplied.