PT-2019-5974 · Papercut · Papercut Ng+1

Published 2019-02-20 · Updated 2019-02-21 · CVE-2019-8948

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PaperCut MF versions prior to 18.3.6 PaperCut NG versions prior to 18.3.6

Description The issue exists due to the lack of measures to neutralize special elements in the software, allowing a remote attacker to inject scripts through the user interface.

Recommendations For PaperCut MF versions prior to 18.3.6, update to version 18.3.6 or later. For PaperCut NG versions prior to 18.3.6, update to version 18.3.6 or later.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

BDU:2021-04054

CVE-2019-8948

Affected Products

Papercut Mf

Papercut Ng

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-8948 · Security Note
• https://papercut.com/products/mf/release-history · Vendor Advisory
• https://papercut.com/products/ng/release-history · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8948 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04054 · Security Note
• https://cvedetails.com/cve/CVE-2019-8948 · Note