{"id":"CVE-2023-3486","published":"2023-07-25T12:50:42Z","modified":"2024-10-23T19:02:59Z","title":"PaperCut NG Unauthenticated File Upload","vendor":"PaperCut","product":"PaperCut NG","tier":"core","eol":null,"affectedVersions":[{"vendor":"PaperCut","product":"PaperCut NG","versions":["< 22.1.3"]}],"description":{"text":"An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the service from operating as expected.\n","provenance":"source","from":"CVE.org"},"summary":{"text":"An authentication bypass in PaperCut NG (versions 22.0.12 and prior) lets a remote, unauthenticated attacker upload arbitrary files to the host's file storage, with the flaw resident in the product's file handling. Exploitation requires only network access to the PaperCut NG service, with no credentials or user interaction, and the uploaded files can exhaust system resources and prevent the service from operating as expected.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:16:04Z"},"cvss":{"score":8.2,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.79159,"percentile":0.99597,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-434","name":"Unrestricted Upload of File with Dangerous Type"}],"references":[{"url":"https://www.tenable.com/security/research/tra-2023-23","tags":[]},{"url":"https://www.papercut.com/kb/Main/SecurityBulletinJuly2023/","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-44145","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44145","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2023-07-25","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2023-3486","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":25.7,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.92,"detail":"percentile 0.9960"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.74,"detail":"base score 8.2"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}