CVE-2023-3486: PaperCut NG Unauthenticated File Upload
An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the service from operating as expected.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the authentication bypass in PaperCut NG?
The vulnerability ID for the authentication bypass in PaperCut NG is CVE-2023-3486.
What is the severity level of CVE-2023-3486?
The severity level of CVE-2023-3486 is high with a score of 7.5.
Which versions of PaperCut NG are affected by CVE-2023-3486?
Versions 22.0.12 and prior of PaperCut NG are affected by CVE-2023-3486.
How can an attacker exploit CVE-2023-3486?
An attacker can exploit CVE-2023-3486 to upload arbitrary files to the PaperCut NG host's file storage, causing resource exhaustion and service disruption.
Where can I find more information about CVE-2023-3486?
You can find more information about CVE-2023-3486 at the following references: [https://www.tenable.com/security/research/tra-2023-23](https://www.tenable.com/security/research/tra-2023-23) and [https://www.papercut.com/kb/Main/SecurityBulletinJuly2023/](https://www.papercut.com/kb/Main/SecurityBulletinJuly2023/).