Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-1883 EUVD-2024-17608GHSA-6xfp-26pf-r3p6

Reflected XSS in PaperCut NG/MF

Published Mar 14, 2024 · Updated Sep 26, 2024 · Assigned by PaperCut

Description

This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability.

Affected products

VendorProductAffectedFixed
PaperCut PaperCut NG, PaperCut MF < 23.0.7, < 22.1.5, < 21.2.14, < 20.1.10 23.0.7

References