PaperCut NG 22.0.10
Approved changes feed: RSS · Atom
cpe:2.3:a:papercut:papercut_ng:22.0.10:*:*:*:*:*:*:*
part: a version: 22.0.10 update: *
| Vendor | Papercut (5a23865c-3ba8-545b-b35e-5012dab36247) |
|---|---|
| Product | Papercut Ng (5d112bad-fba0-56cf-a2b3-6845ecc2d33a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-39470 |
vulnerable | 2026-06-08 06:09:37.550302 |
PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability
HIGH (7.2)
PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability.
The specific flaw exists within the management of the print.script.sandboxed setting. The issue results from the exposure of a dangerous function. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-20965.
Published: 2024-11-22T20:04:57.069Z
Updated: 2024-12-05T14:50:39.655Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2533 |
vulnerable | 2026-06-08 06:02:42.485678 |
PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
HIGH (8.4)
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in
PaperCut NG/MF, which, under specific conditions, could potentially enable
an attacker to alter security settings or execute arbitrary code. This could
be exploited if the target is an admin with a current login session. Exploiting
this would typically involve the possibility of deceiving an admin into clicking
a specially crafted malicious link, potentially leading to unauthorized changes.
Published: 2023-06-20T14:45:14.102Z
Updated: 2025-10-21T23:05:45.534Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.