CVEvulnerability

CVE-2024-1654

7.2 HIGH Published 2024-03-14 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-03-14
Last modified
2026-06-17
Assigner
eb41dac7-0af8-4f84-9f6d-0272772514f4
CVSS 3.1 (eb41dac7-0af8-4f84-9f6d-0272772514f4)
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-183

Description

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this.

Affected configurations

• papercut papercut mf (< 20.1.10) • papercut papercut mf (>= 21.0.0 < 21.2.14) • papercut papercut mf (>= 22.0.0 < 22.1.5) • papercut papercut mf (>= 23.0.1 < 23.0.7) • papercut papercut ng (< 20.1.10) • papercut papercut ng (>= 21.0.0 < 21.2.14) • papercut papercut ng (>= 22.0.0 < 22.1.5) • papercut papercut ng (>= 23.0.1 < 23.0.7)

Related

Weakness · CWE (1)

  • CWE-183 Permissive List of Allowed Inputs weakness

References