CyberRota Analysis
AI-GeneratedThe vulnerability in Paperless-ngx allows users with limited permissions to exploit the MailAccountViewSet.test() action by redirecting authentication requests to an attacker-controlled IMAP server. This results in the exposure of sensitive credentials, including stored IMAP passwords and OAuth tokens. Organizations using Paperless-ngx should prioritize this issue to prevent potential credential theft and unauthorized access to email accounts.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Paperless-ngx's MailAccountViewSet.test action, when called with an existing account's ID and a masked password field, reuses the stored password, account_type, refresh_token, and expiration from that existing account while allowing the caller to supply a different imap_server, imap_port, and imap_security in the same request.