{"schema":"vulnpedia.poc/1","cve":"CVE-2023-27350","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2023-04-21","ransomware":true},"epss":{"score":0.99999,"percentile":0.99995},"cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/papercut_ng_auth_bypass.rb","executable":true,"sourceId":"exploit/multi/http/papercut_ng_auth_bypass","description":"PaperCut PaperCutNG Authentication Bypass","verification":"catalogued","source":"metasploit","modified":"2026-04-22 11:58:04 +0000","origins":[{"source":"metasploit","sourceId":"exploit/multi/http/papercut_ng_auth_bypass","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/papercut_ng_auth_bypass.rb"},{"source":"metasploit","sourceId":"exploit/multi/http/papercut_ng_auth_bypass","modified":"2026-04-22 11:58:04 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/papercut_ng_auth_bypass.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/c6701956d915","executable":false,"sourceId":"c6701956d915","verification":"catalogued","source":"vulncheck-kev","modified":"2023-04-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c6701956d915","modified":"2023-04-18T00:00:00Z","url":"https://vulncheck.com/xdb/c6701956d915"}],"repositoryUrl":"https://github.com/horizon3ai/CVE-2023-27350"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/bd68c4a2099b","executable":false,"sourceId":"bd68c4a2099b","verification":"catalogued","source":"vulncheck-kev","modified":"2023-04-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"bd68c4a2099b","modified":"2023-04-18T00:00:00Z","url":"https://vulncheck.com/xdb/bd68c4a2099b"}],"repositoryUrl":"https://github.com/adhikara13/CVE-2023-27350"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/c10b926bea25","executable":false,"sourceId":"c10b926bea25","verification":"catalogued","source":"vulncheck-kev","modified":"2023-04-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c10b926bea25","modified":"2023-04-18T00:00:00Z","url":"https://vulncheck.com/xdb/c10b926bea25"}],"repositoryUrl":"https://github.com/Pari-Malam/CVE-2023-27350"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/1c0718580d28","executable":false,"sourceId":"1c0718580d28","verification":"catalogued","source":"vulncheck-kev","modified":"2023-04-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"1c0718580d28","modified":"2023-04-18T00:00:00Z","url":"https://vulncheck.com/xdb/1c0718580d28"}],"repositoryUrl":"https://github.com/MaanVader/CVE-2023-27350-POC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/40e9921e9645","executable":false,"sourceId":"40e9921e9645","verification":"catalogued","source":"vulncheck-kev","modified":"2023-04-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"40e9921e9645","modified":"2023-04-18T00:00:00Z","url":"https://vulncheck.com/xdb/40e9921e9645"}],"repositoryUrl":"https://github.com/Jenderal92/CVE-2023-27350"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/e218f81318d4","executable":false,"sourceId":"e218f81318d4","verification":"catalogued","source":"vulncheck-kev","modified":"2023-04-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"e218f81318d4","modified":"2023-04-18T00:00:00Z","url":"https://vulncheck.com/xdb/e218f81318d4"}],"repositoryUrl":"https://github.com/BEPb/tryhackme"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/5436303f61fa","executable":false,"sourceId":"5436303f61fa","verification":"catalogued","source":"vulncheck-kev","modified":"2023-04-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5436303f61fa","modified":"2023-04-18T00:00:00Z","url":"https://vulncheck.com/xdb/5436303f61fa"}],"repositoryUrl":"https://github.com/imancybersecurity/CVE-2023-27350-POC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/26313d6db3f2","executable":false,"sourceId":"26313d6db3f2","verification":"catalogued","source":"vulncheck-kev","modified":"2023-04-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"26313d6db3f2","modified":"2023-04-18T00:00:00Z","url":"https://vulncheck.com/xdb/26313d6db3f2"}],"repositoryUrl":"https://github.com/monke443/CVE-2023-27350"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0d92f5504dc8","executable":false,"sourceId":"0d92f5504dc8","verification":"catalogued","source":"vulncheck-kev","modified":"2023-04-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0d92f5504dc8","modified":"2023-04-18T00:00:00Z","url":"https://vulncheck.com/xdb/0d92f5504dc8"}],"repositoryUrl":"https://github.com/Royall-Researchers/CVE-2023-27350"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/a4f5bcde4d6c","executable":false,"sourceId":"a4f5bcde4d6c","verification":"catalogued","source":"vulncheck-kev","modified":"2023-04-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a4f5bcde4d6c","modified":"2023-04-18T00:00:00Z","url":"https://vulncheck.com/xdb/a4f5bcde4d6c"}],"repositoryUrl":"https://github.com/dezso-dfield/CVE-2023-27350"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/b08c040aeb38","executable":false,"sourceId":"b08c040aeb38","verification":"catalogued","source":"vulncheck-kev","modified":"2023-04-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"b08c040aeb38","modified":"2023-04-18T00:00:00Z","url":"https://vulncheck.com/xdb/b08c040aeb38"}],"repositoryUrl":"https://github.com/joaoaugustom/PaperCut-Authentication_Bypass_and_RCE"},{"kind":"exploitdb","id":"51391","url":"https://www.exploit-db.com/exploits/51391","code":"https://www.exploit-db.com/download/51391","executable":true},{"kind":"exploitdb","id":"51452","url":"https://www.exploit-db.com/exploits/51452","code":"https://www.exploit-db.com/download/51452","executable":true}],"poc_candidates":[{"url":"https://github.com/MaanVader/CVE-2023-27350-POC","source":"poc-in-github","sourceId":"CVE-2023-27350","description":"A simple python script to check if a service is vulnerable","modified":"2024-01-07T22:14:44Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/MaanVader/CVE-2023-27350-POC"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2024-01-07T22:14:44Z","url":"https://github.com/MaanVader/CVE-2023-27350-POC"}],"tags":[]},{"url":"https://github.com/imancybersecurity/CVE-2023-27350-POC","source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2024-12-06T21:40:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/imancybersecurity/CVE-2023-27350-POC"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2024-12-06T21:40:30Z","url":"https://github.com/imancybersecurity/CVE-2023-27350-POC"}],"tags":[]},{"url":"https://github.com/horizon3ai/CVE-2023-27350","source":"poc-in-github","sourceId":"CVE-2023-27350","description":"Proof of Concept Exploit for PaperCut CVE-2023-27350","modified":"2026-10-02T08:37:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/horizon3ai/CVE-2023-27350"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2026-10-02T08:37:11Z","url":"https://github.com/horizon3ai/CVE-2023-27350"}],"tags":[]},{"url":"https://github.com/adhikara13/CVE-2023-27350","source":"poc-in-github","sourceId":"CVE-2023-27350","description":"Exploit for Papercut CVE-2023-27350. [+] Reverse shell [+] Mass checking","modified":"2026-08-24T14:52:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/adhikara13/CVE-2023-27350"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2026-08-24T14:52:14Z","url":"https://github.com/adhikara13/CVE-2023-27350"}],"tags":[]},{"url":"https://github.com/Ap0dexMe0/CVE-2023-27350","source":"poc-in-github","sourceId":"CVE-2023-27350","description":"Perfom With Massive Authentication Bypass In PaperCut MF/NG","modified":"2025-04-07T15:29:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/Ap0dexMe0/CVE-2023-27350"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2025-04-07T15:29:30Z","url":"https://github.com/Ap0dexMe0/CVE-2023-27350"}],"tags":[]},{"url":"https://github.com/Jenderal92/CVE-2023-27350","source":"poc-in-github","sourceId":"CVE-2023-27350","description":"Python 2.7","modified":"2026-05-30T18:38:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/Jenderal92/CVE-2023-27350"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2026-05-30T18:38:12Z","url":"https://github.com/Jenderal92/CVE-2023-27350"}],"tags":[]},{"url":"https://github.com/ASG-CASTLE/CVE-2023-27350","source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2024-04-19T04:47:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/ASG-CASTLE/CVE-2023-27350"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2024-04-19T04:47:11Z","url":"https://github.com/ASG-CASTLE/CVE-2023-27350"}],"tags":[]},{"url":"https://github.com/rasan2001/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability","source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2024-08-01T14:12:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/rasan2001/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2024-08-01T14:12:13Z","url":"https://github.com/rasan2001/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability"}],"tags":[]},{"url":"https://github.com/monke443/CVE-2023-27350","source":"poc-in-github","sourceId":"CVE-2023-27350","description":"Unauthenticated remote command execution in Papercut service allows an attacker to execute commands due to improper access controls in the SetupCompleted Java class.","modified":"2025-04-28T06:58:21Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/monke443/CVE-2023-27350"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2025-04-28T06:58:21Z","url":"https://github.com/monke443/CVE-2023-27350"}],"tags":[]},{"url":"https://github.com/0xB0y426/CVE-2023-27350-PoC","source":"poc-in-github","sourceId":"CVE-2023-27350","description":"PoC for CVE-2023-27350","modified":"2025-04-14T02:36:19Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/0xB0y426/CVE-2023-27350-PoC"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2025-04-14T02:36:19Z","url":"https://github.com/0xB0y426/CVE-2023-27350-PoC"}],"tags":[]},{"url":"https://github.com/Royall-Researchers/CVE-2023-27350","source":"poc-in-github","sourceId":"CVE-2023-27350","description":"Papercut Vulnerability, Affected Versions are PaperCut MF or NG version 8.0 or later (excluding patched versions) on all OS platforms. ","modified":"2025-07-05T14:09:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/Royall-Researchers/CVE-2023-27350"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2025-07-05T14:09:38Z","url":"https://github.com/Royall-Researchers/CVE-2023-27350"}],"tags":[]},{"url":"https://github.com/dezso-dfield/CVE-2023-27350","source":"poc-in-github","sourceId":"CVE-2023-27350","description":"PaperCut NG/MG Authentication Bypass and Remote Code Execution (RCE) Exploit Tool. A standalone Bash implementation of the PaperCut exploit chain, featuring optional proxy support, automated session elevation, and dynamic command injection via the print scripting engine. Designed for security auditing and authorized penetration testing.","modified":"2025-12-19T12:43:09Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/dezso-dfield/CVE-2023-27350"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2025-12-19T12:43:09Z","url":"https://github.com/dezso-dfield/CVE-2023-27350"}],"tags":[]},{"url":"https://github.com/joaoaugustom/PaperCut-Authentication_Bypass_and_RCE","source":"poc-in-github","sourceId":"CVE-2023-27350","description":"This exploit is based on CVE-2023-27350 and was built upon the original exploit by horizon3ai and the Metasploit module.","modified":"2026-05-30T19:16:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/joaoaugustom/PaperCut-Authentication_Bypass_and_RCE"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2026-05-30T19:16:40Z","url":"https://github.com/joaoaugustom/PaperCut-Authentication_Bypass_and_RCE"}],"tags":[]},{"url":"https://github.com/HORKimhab/CVE-2023-27350-CVE-2023-27351","source":"poc-in-github","sourceId":"CVE-2023-27350","description":"CVE-2023-27350, CVE-2023-27351 - PaperCut - Draft or TODO","modified":"2026-08-28T08:32:54Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27350","url":"https://github.com/HORKimhab/CVE-2023-27350-CVE-2023-27351"},{"source":"poc-in-github","sourceId":"CVE-2023-27350","modified":"2026-08-28T08:32:54Z","url":"https://github.com/HORKimhab/CVE-2023-27350-CVE-2023-27351"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2023-27350 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2023-27350 && searchsploit -m 51391","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2023-27350 && searchsploit -m 51452","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2023-27350/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27350.yaml","template":"http/cves/2023/CVE-2023-27350.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2023-27350%22&type=repositories","executable":false}]}