CVE-2014-2659

Published: Apr 22, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected (28)

Products: Papercut: Papercut Mf, Papercut Ng

Papercut

2 products

Papercut Mf

Papercut Ng

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Papercut Papercut Mf	Up to 14.1
Papercut Papercut Mf	Version 12.0
Papercut Papercut Mf	Version 12.1
Papercut Papercut Mf	Version 12.2
Papercut Papercut Mf	Version 12.3
Papercut Papercut Mf	Version 12.4
Papercut Papercut Mf	Version 12.5
Papercut Papercut Mf	Version 13.0
Papercut Papercut Mf	Version 13.1
Papercut Papercut Mf	Version 13.2
Papercut Papercut Mf	Version 13.3
Papercut Papercut Mf	Version 13.4
Papercut Papercut Mf	Version 13.5
Papercut Papercut Mf	Version 14.0
Papercut Papercut Ng	Up to 14.1
Papercut Papercut Ng	Version 12.0
Papercut Papercut Ng	Version 12.1
Papercut Papercut Ng	Version 12.2
Papercut Papercut Ng	Version 12.3
Papercut Papercut Ng	Version 12.4
Papercut Papercut Ng	Version 12.5
Papercut Papercut Ng	Version 13.0
Papercut Papercut Ng	Version 13.1
Papercut Papercut Ng	Version 13.2
Papercut Papercut Ng	Version 13.3
Papercut Papercut Ng	Version 13.4
Papercut Papercut Ng	Version 13.5
Papercut Papercut Ng	Version 14.0