Critical severity9.8NVD Advisory· Published Aug 4, 2023· Updated Jun 17, 2026
CVE-2023-39143
CVE-2023-39143
Description
PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled (a very common configuration).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*range: <22.1.3
- (no CPE)
- (no CPE)range: <22.1.3
cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*range: <22.1.3
- (no CPE)range: <22.1.3
Patches
Vulnerability mechanics
References
2- www.horizon3.ai/cve-2023-39143-papercut-path-traversal-file-upload-rce-vulnerability/nvdExploitThird Party Advisory
- www.papercut.com/kb/Main/securitybulletinjuly2023/nvdVendor Advisory
News mentions
0No linked articles in our index yet.