| Package | Affected versions | Patched versions |
|---|---|---|
| papercut mf | ≥ 21.0.0, < 21.2.14≥ 22.0.0, < 22.1.5≥ 23.0.1, < 23.0.7< 20.1.10 | 21.2.1422.1.523.0.720.1.10 |
| papercut ng | ≥ 21.0.0, < 21.2.14≥ 22.0.0, < 22.1.5≥ 23.0.1, < 23.0.7< 20.1.10 | 21.2.1422.1.523.0.720.1.10 |
This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/MF API calls.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free