vulnerability

Ubuntu: USN-3842-1: CUPS vulnerability

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:N)
Published
Dec 10, 2018
Added
Mar 2, 2020
Modified
Feb 19, 2025

Description


Jann Horn discovered that CUPS incorrectly handled session cookie randomness. A remote attacker could possibly use this issue to perform cross-site request forgery (CSRF) attacks.

Solution

ubuntu-upgrade-cups
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.