CVE-2023-3486

HighCVSS 8.2

Published: 25/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

75.79%

99th percentile - higher than 99% of all known CVEs

Summary

An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage.

Risk Assessment

This could exhaust system resources and prevent the service from operating as expected.

Recommendation

It is recommended to upgrade to the latest version of PaperCut NG to mitigate this vulnerability.

Original NVD description (English source)

An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the service from operating as expected.