CVE-2019-8948: Critical severity PaperCut PaperCut MF vulnerability
Published Feb 20, 2019
·Updated
PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.
Affected Software
2 affected components
PaperCut PaperCut MF<18.3.6
PaperCut PaperCut NG<18.3.6
Event History
Feb 20, 2019
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is CVE-2019-8948?
CVE-2019-8948 is a vulnerability found in PaperCut MF and PaperCut NG versions before 18.3.6 that allows script injection via the user interface.
2
What is the severity of CVE-2019-8948?
CVE-2019-8948 has a severity level of 9.8 (Critical).
3
Which software versions are affected by CVE-2019-8948?
PaperCut MF versions before 18.3.6 and PaperCut NG versions before 18.3.6 are affected by CVE-2019-8948.
4
How can script injection occur via the user interface in PaperCut MF and PaperCut NG?
Script injection can occur via the user interface in PaperCut MF and PaperCut NG versions before 18.3.6 due to the vulnerability identified as CVE-2019-8948.
5
How can I fix CVE-2019-8948 in PaperCut MF and PaperCut NG?
To fix CVE-2019-8948, you should update your PaperCut MF and PaperCut NG installations to version 18.3.6 or later.