CVE-2019-8948
First published: Wed Feb 20 2019(Updated: )
PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Papercut Papercut Mf | <18.3.6 | |
| Papercut Papercut Ng | <18.3.6 | |
| <18.3.6 | ||
| <18.3.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-8948?
CVE-2019-8948 is a vulnerability found in PaperCut MF and PaperCut NG versions before 18.3.6 that allows script injection via the user interface.
What is the severity of CVE-2019-8948?
CVE-2019-8948 has a severity level of 9.8 (Critical).
Which software versions are affected by CVE-2019-8948?
PaperCut MF versions before 18.3.6 and PaperCut NG versions before 18.3.6 are affected by CVE-2019-8948.
How can script injection occur via the user interface in PaperCut MF and PaperCut NG?
Script injection can occur via the user interface in PaperCut MF and PaperCut NG versions before 18.3.6 due to the vulnerability identified as CVE-2019-8948.
How can I fix CVE-2019-8948 in PaperCut MF and PaperCut NG?
To fix CVE-2019-8948, you should update your PaperCut MF and PaperCut NG installations to version 18.3.6 or later.
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/papercut
- canonical/papercut papercut mf
- canonical/papercut papercut ng