发布于3月6日3月6日 Members PaperCut PaperCutNG Authentication Bypass Disclosed 03/13/2023 Created 06/07/2023 Description This module leverages an authentication bypass in PaperCut NG. If necessary it updates Papercut configuration options, specifically the 'print-and-device.script.enabled' and 'print.script.sandboxed' options to allow for arbitrary code execution running in the builtin RhinoJS engine. This module logs at most 2 events in the application log of papercut. Each event is tied to modifcation of server settings. Author(s) catatonicprime Platform Java Architectures java Development Source Code History
