CVE-2024-1221 – Improper access controls on APIs on Linux and macOS in PaperCut NG/MF

https://notcve.org/view.php?id=CVE-2024-1221

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some reconnaissance to gain knowledge of a system token. This CVE only affects Linux and macOS PaperCut NG/MF servers. Esta vulnerabilidad potencialmente permite que los archivos en un servidor PaperCut NG/MF queden expuestos utilizando un payload formado específicamente contra el endpoint API afectado. El atacante debe realizar algún reconocimiento para conocer un token del sistema. • https://www.papercut.com/kb/Main/Security-Bulletin-March-2024 • CWE-20: Improper Input Validation CWE-76: Improper Neutralization of Equivalent Special Elements •