LOW🇵🇱 Wersja polska

CVE-2024-1221

CVSS 3.1v3.1pub. 2024-03-14upd. 2025-01-23

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some reconnaissance to gain knowledge of a system token. This CVE only affects Linux and macOS PaperCut NG/MF servers.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

  • Apple macOS

    OS
    Apple
    wszystkie wersje

  • Linux Kernel

    OS
    Linux
    wszystkie wersje

  • Papercut Mf

    APP
    Papercut
    22.0.0 – 22.1.5 (bez)23.0.1 – 23.0.7 (bez)< 20.1.1021.0.0 – 21.2.14 (bez)

  • Papercut Ng

    APP
    Papercut
    22.0.0 – 22.1.5 (bez)23.0.1 – 23.0.7 (bez)21.0.0 – 21.2.14 (bez)< 20.1.10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-43300CRITICAL10.0⚠ KEVPL ✓ten sam produkt

Apple iOS/iPadOS/macOS — out-of-bounds write przy przetwarzaniu obrazu

CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP

CVE-2025-31200CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Apple — memory corruption (RCE) w przetwarzaniu strumieni audio

CVE-2025-31201CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Apple: Obejście Pointer Authentication w iOS, macOS i innych platformach