Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-4568. PoCs published by Cappricio-Securities. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a Python-based scanner for detecting CVE-2023-4568, an unauthenticated XMLRPC vulnerability in PaperCut NG. The tool checks for the presence of the vulnerability by sending crafted requests to the target URL and analyzing the response.
Description
PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.
Exploits (1)
This repository contains a Python-based scanner for detecting CVE-2023-4568, an unauthenticated XMLRPC vulnerability in PaperCut NG. The tool checks for the presence of the vulnerability by sending crafted requests to the target URL and analyzing the response.
Nuclei Templates (1)
html:"content=\"PaperCut\"" || http.html:'content="papercut' || cpe:"cpe:2.3:a:papercut:papercut_ng" || http.html:"content=\"papercut\""
body='content="papercut' || body="content=\"papercut\""
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N