| Package | Affected versions | Patched versions |
|---|---|---|
| papercut mf | ≥ 21.0.0, < 21.2.14≥ 22.0.0, < 22.1.5≥ 23.0.1, < 23.0.7< 20.1.10 | 21.2.1422.1.523.0.720.1.10 |
| papercut ng | ≥ 21.0.0, < 21.2.14≥ 22.0.0, < 22.1.5≥ 23.0.1, < 23.0.7< 20.1.10 | 21.2.1422.1.523.0.720.1.10 |
This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an attacker to induce the server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free