CVE-2023-2508: papercut mobility print server

csirt@kutim:~/threat-intel/cve/CVE-2023-2508

CVSS 6.5 · Medium EPSS 0,27%

Kerentanan Cross-Site Request Forgery (CSRF) pada papercut mobility print server. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

The `PaperCutNG Mobility Print` version 1.0.3512 application allows an unauthenticated attacker to perform a CSRF attack on an instance administrator to configure the clients host (in the "configure printer discovery" section). This is possible because the application has no protections against CSRF attacks, like Anti-CSRF tokens, header origin validation, samesite cookies, etc.

Rincian

Terbit di NVD: 20 September 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-352: Cross-Site Request Forgery (CSRF)
EPSS (30 hari): 0,27% peluang dieksploitasi; lebih tinggi dari 17,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
papercut	mobility print server	Versi 1.0.3512

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://fluidattacks.com/advisories/solveig/ exploit · advisory pihak ketiga
https://www.papercut.com/help/manuals/mobility-print/release-history/#mobility-print-server release notes

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.