CVE-2023-4568: medium-severity vulnerability in PaperCut NG
PaperCut NG Unauthenticated XMLRPC
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 6.5epss 3.9%
PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
PaperCut · PaperCut NGRelated CVEs — PaperCut NG
In the same product, most dangerous first.