Filtered by vendor Papercut Subscriptions
Filtered by product Mobility Print Server Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-2508 2 Apple, Papercut 2 Macos, Mobility Print Server 2024-11-21 5.3 Medium
The `PaperCutNG Mobility Print` version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host (in the "configure printer discovery" section). This is possible because the application has no protections against CSRF attacks, like Anti-CSRF tokens, header origin validation, samesite cookies, etc.