important · Edge — Print
Unauthenticated PaperCut requests can reach operating-system command execution.
Affects
PaperCut NG and PaperCut MF print-management application servers on Windows and Linux
A direct-component request makes the authorization check trust a public page while invoking an administrative action. That access changes database lookup configuration so PaperCut loads an attacker-selected Java class.
Detail and 3 sources
Huntress reproduced SYSTEM execution on stock Windows and observed the same exploitation sequence in customer environments.