NG vulnerabilities

4 known vulnerabilities in NG from PaperCut. 4 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  NG: Exposed Dangerous Method or Function

  CVE-2023-39470Nov 22, 2024PaperCutEPSS 1.77%

  PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnera

• 7.2 High severity

  NG: Improper Control of Generation of Code

  CVE-2023-39469May 3, 2024PaperCutEPSS 61.4%

  PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PaperCut NG. Authentication is required to exploit this vulnerability. The sp

• 7.5 High severity

  PaperCut NG/MF Improper Authentication Exploited

  CVE-2023-27351Apr 20, 2023PaperCutEPSS 78.1%

  This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. Th

• 9.8 Critical severity

  PaperCut MF/NG Improper Access Control Exploited

  CVE-2023-27350Apr 20, 2023PaperCutEPSS 100%

  This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue