PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF

CVE-2023-2533

What is CVE-2023-2533?

A Cross-Site Request Forgery (CSRF) vulnerability exists in PaperCut NG/MF that could allow attackers to manipulate security settings or execute arbitrary commands. If an administrator is tricked into clicking a malicious link while logged in, it may lead to unauthorized changes within the system. This flaw highlights the importance of secure session management and awareness of social engineering tactics.

References