← Back to browse · API

CVE-2024-1222

Severity
HIGH
CVSS
8.6
EPSS
0.63984
Risk score
56.79
CISA KEV
No
PoC
No
Published
2024-03-14
Modified
2024-09-26
First seen
2026-08-07
Aliases
EUVD-2024-16989, GHSA-8Q2G-9F98-XXWF
Products
PaperCut:PaperCut NG, PaperCut MF, PaperCut:PaperCut NG, PaperCut MF 0 <20.1.10, PaperCut:PaperCut NG, PaperCut MF 0 <21.2.14, PaperCut:PaperCut NG, PaperCut MF 0 <22.1.5, PaperCut:PaperCut NG, PaperCut MF 0 <23.0.7
Sources
euvd EUVD-2024-16989

Description

This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/MF API calls.

References