Advisories · Technology
PaperCut NG, PaperCut MF.
Every CVE that names PaperCut NG, PaperCut MF among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Arbitrary File Deletion in PaperCut NG/MF Web Print Hot folder
- PaperCut NG, PaperCut MF
- Path traversal
- CVSS 6.1 Medium
Arbitrary File Creation in PaperCut NG/MF Web Print leading to a Denial of Service attack
- PaperCut NG, PaperCut MF
- Command injection
- CVSS 7.8 High
Arbitrary File Creation in PaperCut NG/MF Web Print Image Handler
- PaperCut NG, PaperCut MF
- Command injection
- CVSS 7.8 High
Arbitrary File Deletion in PaperCut NG/MF Web Print
- PaperCut NG, PaperCut MF
- Path traversal
- CVSS 6.5 Medium
Server Side Request Forgery in PaperCut NG/MF
- PaperCut NG, PaperCut MF
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
Reflected XSS in PaperCut NG/MF
- PaperCut NG, PaperCut MF
- CWE-76
- CVSS 7.2 High
Server-side resource injection in PaperCut NG/MF
- PaperCut NG, PaperCut MF
- CWE-76
- CVSS 7.2 High
Unauthorized write operations in PaperCut NG/MF
- PaperCut NG, PaperCut MF
- CWE-183
- CVSS 4.8 Medium
Improper authorization controls in PaperCut NG/MF
- PaperCut NG, PaperCut MF
- CWE-488
- CVSS 8.6 HighCritical · CVSS 7+ and EPSS
Incorrect authorization controls in PaperCut NG/MF APIs
- PaperCut NG, PaperCut MF
- Privilege escalation
- CVSS 3.1 Low
Improper access controls on APIs on Linux and macOS in PaperCut NG/MF
- PaperCut NG, PaperCut MF
- CWE-76
- CVSS 7.8 High
Privilege Escalation Vulnerability
- PaperCut NG, PaperCut MF
- Privilege escalation