Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

Source: The Hacker News

Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional hardening.

“This vulnerability gives an unauthenticated attacker remote control over PaperCut’s trust


Read original