CVE-2023-31046

published 2023-10-19

CVE-2023-31046: A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an…

Priority P3 40 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only access to the server's filesystem, because requests beginning with "GET /ui/static/..//.." reach getStaticContent in UIContentResource.class in the static-content-files servlet.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
papercut	papercut_mf	< 22.1.1	22.1.1
papercut	papercut_ng	< 22.1.1	22.1.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22