Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2024-1221

Improper access controls on APIs on Linux and macOS in PaperCut NG/MF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
PaperCut

Description

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some reconnaissance to gain knowledge of a system token. This CVE only affects Linux and macOS PaperCut NG/MF servers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PaperCut PaperCut NG, PaperCut MF

Default version status: affected

  • 0 to < 23.0.7affected
  • 0 to < 22.1.5affected
  • 0 to < 21.2.14affected
  • 0 to < 20.1.10affected

References