CrowdSecLive Exploit Tracker
Limited ExploitationCVE-2023-39143Public Exploit

PaperCut - Path Traversal (CVE-2023-39143)

PublishedAug 4, 2023
First SeenN/A
Last Seen
Reported
CVSS9.8
PaperCut
PaperCutPaperCut
enterprise_software

Description

PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled (a very common configuration).

psychologyCrowdSec Analysis

CVE-2023-39143 is a critical path traversal vulnerability in PaperCut NG and PaperCut MF on Windows systems prior to version 22.1.3. This flaw allows remote attackers to upload, read, or delete arbitrary files, and can lead to remote code execution when external device integration is enabled—a common setup. Exploitation of this vulnerability could result in full system compromise, making it a significant threat to affected organizations.

CrowdSec has been tracking this vulnerability and its exploits since 8th of April 2026.

CrowdSec has not observed any significant exploitation activity targeting CVE-2023-39143 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers exploit this vulnerability by sending requests to URLs containing /custom-report-example/..\\..\\..\\ to perform path traversal and access arbitrary files on vulnerable PaperCut servers.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2023-08-04
Rule Released2026-04-08

Related Weaknesses

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References