VULNERABILITY INTELLIGENCE

CVE-2023-2508

CVSS score5.3 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2023-09-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

The `PaperCutNG Mobility Print` version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host (in the "configure printer discovery" section). This is possible because the application has no protections against CSRF attacks, like Anti-CSRF tokens, header origin validation, samesite cookies, etc.

Weakness classification

  • help@fluidattacks.com: CWE-352
  • nvd@nist.gov: CWE-352

Primary references