CVE-2023-2508

CVE-2023-2508

The `PaperCutNG Mobility Print` version 1.0.3512 application allows an

unauthenticated attacker to perform a CSRF attack on an instance

administrator to configure the clients host (in the "configure printer

discovery" section). This is possible because the application has no

protections against CSRF attacks, like Anti-CSRF tokens, header origin

validation, samesite cookies, etc.

Source: CVE-2023-2508

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다