high8.6
CVE-2024-1222
This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges.
Impact
This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/MF API calls.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Papercut | Papercut Mf | before 20.1.10 from 21.0.0 before 21.2.14 from 22.0.0 before 22.1.5 from 23.0.1 before 23.0.7 |
| Papercut | Papercut Ng | before 20.1.10 from 21.0.0 before 21.2.14 from 22.0.0 before 22.1.5 from 23.0.1 before 23.0.7 |