ZDI-24-1314: PaperCut NG pc-web-print Link Following Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of PaperCut NG. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.1. The following CVEs are assigned: CVE-2024-8405.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1314?
The severity of ZDI-24-1314 is classified as high due to its potential to cause a denial-of-service condition.
How do I fix ZDI-24-1314?
To fix ZDI-24-1314, install the latest security update released by PaperCut for the affected version of PaperCut NG.
Who is affected by ZDI-24-1314?
ZDI-24-1314 affects installations of PaperCut NG that allow low-privileged code execution.
What type of attack does ZDI-24-1314 facilitate?
ZDI-24-1314 facilitates a denial-of-service attack, disrupting service availability.
What are the prerequisites for exploiting ZDI-24-1314?
An attacker must first have the ability to execute low-privileged code on the target system to exploit ZDI-24-1314.