vulnerability
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication
High
Summary
Attackers are chaining two PaperCut vulnerabilities – one related to dynamic class loading and another to improper access control – to execute arbitrary code on susceptible instances without authentication. The vulnerability allows for remote code execution, and threat actors have been observed exploiting these flaws to gain control and fingerprint systems. PaperCut has released patches and recommends restricting access to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data