CVE-2023-39143

Description

PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled (a very common configuration).

NVD

Severity: CRITICAL
CVE ID: CVE-2023-39143
CVSS Score: 9.8
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Refrence: NVDMITRE

Proof Of Concept

Nuclei Templates for CVE-2023-39143

Refrence: Project Discovery GitHub

Content on GitHub

codeb0ss | watchers:0

CVE-2023-39143
CVE-2023-39143 < PaperCut < Path Traversal (PT)

Refrence: GitHub