CVE-2023-31046

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-10-19 · updated 2026-06-17
Weakness: CWE-22

Description

A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. Under specific conditions, this could potentially allow an authenticated attacker to achieve read-only access to the server's filesystem, because requests beginning with "GET /ui/static/..//.." reach getStaticContent in UIContentResource.class in the static-content-files servlet.

Affected products

PaperCut MF: before 22.1.1 — fixed in 22.1.1
PaperCut NG: before 22.1.1 — fixed in 22.1.1

How to fix

Upgrade to a fixed version: PaperCut MF 22.1.1; PaperCut NG 22.1.1. Check the vendor advisory for mitigations.

References

https://research.aurainfosec.io/disclosure/papercut/
https://web.archive.org/web/20230814061444/https://research.aurainfosec.io/disclosure/papercut/
https://www.papercut.com/kb/Main/PO-1216-and-PO-1219#security-notifications
https://www.papercut.com/kb/Main/SecurityBulletinJune2023
https://research.aurainfosec.io/disclosure/papercut/
https://web.archive.org/web/20230814061444/https://research.aurainfosec.io/disclosure/papercut/
https://www.papercut.com/kb/Main/PO-1216-and-PO-1219#security-notifications
https://www.papercut.com/kb/Main/SecurityBulletinJune2023

Get alerted when CVE-2023-31046 or the next vulnerability affects your stack