Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 13/09/2023 Updated: 15/09/2023

CVSS v3 Base Score: 6.5 | Impact Score: 2.5 | Exploitability Score: 3.9

VMScore: 0

PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.

Vulnerable Product	Search on Vulmon	Subscribe to Product
papercut papercut ng

PaperCut NG Unauthenticated XMLRPC Functionality

CVE-2023-4568 PaperCut NG Unauthenticated XMLRPC Functionality

Introduction: An exploitable reflected cross-site scripting (XSS) vulnerability has been discovered in certain versions of cPanel and was assigned with CVE-2023-29489 This vulnerability allows attackers to execute arbitrary JavaScript code without requiring authentication The XSS vulnerability can still be exploited even if the cPanel management ports are not externally expos

CWE-287 https://www.tenable.com/security/research/tra-2023-31 https://nvd.nist.gov https://github.com/Cappricio-Securities/CVE-2023-4568

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-4568

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect