CRITICAL🇵🇱 Wersja polska

CVE-2019-8948

CVSS 9.8v3.0pub. 2019-02-20upd. 2024-11-21

PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Papercut Mf

    APP
    Papercut
    < 18.3.6

  • Papercut Ng

    APP
    Papercut
    < 18.3.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-27350CRITICAL9.8⚠ KEVPL ✓same product

PaperCut MF/NG — Auth Bypass i RCE bez uwierzytelnienia (SYSTEM)

CVE-2023-39143CRITICAL9.8PL ✓same product

PaperCut NG/MF – path traversal umożliwiający RCE przez upload plików

CVE-2019-12135CRITICAL9.8PL ✓same product

RCE w serwerze aplikacji PaperCut MF i NG — zdalne wykonanie kodu

CVE-2023-2533HIGH8.4⚠ KEVsame product

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific...

CVE-2023-27351HIGH7.5⚠ KEVsame product

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 2...