Security Vulnerabilities fixed in PaperCut NG ADVISORY: 2019-06-06

Description

An unspecified vulnerability in the application server in PaperCut NG versions 18.3.8 and earlier and versions 19.0.3 and earlier allows remote attackers to execute arbitrary code via an unspecified vector. In versions before 18.3.6 allows script injections via the user interface and in versions before 14.1 there are cross-site request forgery (CSRF) and denial of service vulnerabilities.

Affected Applications

PaperCut NG

CVE References

CVE-2019-12135 CVE-2019-8948 CVE-2014-2659 CVE-2014-2658

Other References

https://www.papercut.com/products/ng/release-history/