high8.2
CVE-2023-3486
An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the …
Impact
An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the service from operating as expected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Papercut | Papercut Mf | before 22.1.3 |
| Papercut | Papercut Ng | before 22.1.3 |