Vulnerability · Published Mar 14, 2024 · Assigned by PaperCut
CVE-2024-1883Reflected XSS in PaperCut NG/MF
Medium 6.3
In plain English
A medium-severity security flaw in PaperCut NG, PaperCut MF from PaperCut. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 61.5% (higher than 99.2% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)61.5%top 0.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PaperCut | PaperCut NG, PaperCut MF | 0 – before 23.0.70 – before 22.1.50 – before 21.2.140 – before 20.1.10 |
Weakness: CWE-76 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L