CVEvulnerability

CVE-2014-2659

6.8 MEDIUM Published 2014-04-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-04-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected configurations

• papercut papercut mf (<= 14.1) • papercut papercut mf 12.0 • papercut papercut mf 12.1 • papercut papercut mf 12.2 • papercut papercut mf 12.3 • papercut papercut mf 12.4 • papercut papercut mf 12.5 • papercut papercut mf 13.0 • papercut papercut mf 13.1 • papercut papercut mf 13.2 • papercut papercut mf 13.3 • papercut papercut mf 13.4 • papercut papercut mf 13.5 • papercut papercut mf 14.0 • papercut papercut ng (<= 14.1) • papercut papercut ng 12.0 • papercut papercut ng 12.1 • papercut papercut ng 12.2 • papercut papercut ng 12.3 • papercut papercut ng 12.4 • papercut papercut ng 12.5 • papercut papercut ng 13.0 • papercut papercut ng 13.1 • papercut papercut ng 13.2 • papercut papercut ng 13.3 • papercut papercut ng 13.4 • papercut papercut ng 13.5 • papercut papercut ng 14.0

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References