The host is installed with Papercut NG before 22.1.1 and is prone to a cross-site request forgery vulnerability. A flaw is present in the applications which fails to properly handle unspecified vectors. Successful exploitation could allow a remote attackers to alter security settings or execute arbitrary code.