CVE-2024-1222
14.03.2024, 03:15
This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/MF API calls.Enginsight
| Vendor | Product | Version |
|---|---|---|
| papercut | papercut_mf | 𝑥 < 20.1.10 |
| papercut | papercut_mf | 21.0.0 ≤ 𝑥 < 21.2.14 |
| papercut | papercut_mf | 22.0.0 ≤ 𝑥 < 22.1.5 |
| papercut | papercut_mf | 23.0.1 ≤ 𝑥 < 23.0.7 |
| papercut | papercut_ng | 𝑥 < 20.1.10 |
| papercut | papercut_ng | 21.0.0 ≤ 𝑥 < 21.2.14 |
| papercut | papercut_ng | 22.0.0 ≤ 𝑥 < 22.1.5 |
| papercut | papercut_ng | 23.0.1 ≤ 𝑥 < 23.0.7 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration