Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-1654

Unauthorized write operations in PaperCut NG/MF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
PaperCut

Description

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PaperCut PaperCut NG, PaperCut MF

Default version status: affected

  • 0 to < 23.0.7affected
  • 0 to < 22.1.5affected
  • 0 to < 21.2.14affected
  • 0 to < 20.1.10affected

References