CVE-2019-8948
CRITICALPaperCut MF and NG < 18.3.6 - Script Injection via User Interface
Title source: llmDescription
PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.
References (2)
Core 2
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://www.papercut.com/products/mf/release-history/
Release Notes, Vendor Advisory x_refsource_misc
https://www.papercut.com/products/ng/release-history/
Scores
CVSS v3
9.8
EPSS
0.0393
EPSS Percentile
89.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-74
Status
published
Products (2)
papercut/papercut_mf
< 18.3.6
papercut/papercut_ng
< 18.3.6
Published
Feb 20, 2019
Tracked Since
Feb 18, 2026