← Back to browse · API

CVE-2024-1883

Severity
MEDIUM
CVSS
6.3
EPSS
0.61472
Risk score
46.72
CISA KEV
No
PoC
No
Published
2024-03-14
Modified
2024-09-26
First seen
2026-08-07
Aliases
EUVD-2024-17608, GHSA-6XFP-26PF-R3P6
Products
PaperCut:PaperCut NG, PaperCut MF, PaperCut:PaperCut NG, PaperCut MF 0 <20.1.10, PaperCut:PaperCut NG, PaperCut MF 0 <21.2.14, PaperCut:PaperCut NG, PaperCut MF 0 <22.1.5, PaperCut:PaperCut NG, PaperCut MF 0 <23.0.7
Sources
euvd EUVD-2024-17608

Description

This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability.

References