PT-2019-5974 · Papercut · Papercut Ng+1

Publicado 2019-02-20 · Atualizado 2019-02-21 · CVE-2019-8948

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PaperCut MF versions prior to 18.3.6 PaperCut NG versions prior to 18.3.6

Description The issue exists due to the lack of measures to neutralize special elements in the software, allowing a remote attacker to inject scripts through the user interface.

Recommendations For PaperCut MF versions prior to 18.3.6, update to version 18.3.6 or later. For PaperCut NG versions prior to 18.3.6, update to version 18.3.6 or later.

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

BDU:2021-04054

CVE-2019-8948

Produtos afetados

Papercut Mf

Papercut Ng

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-8948 · Nota de Segurança
• https://papercut.com/products/mf/release-history · Aviso do Fabricante
• https://papercut.com/products/ng/release-history · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-8948 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2021-04054 · Nota de Segurança
• https://cvedetails.com/cve/CVE-2019-8948 · Nota