CVE-2024-1883 in PaperCut

الملخص

بحسب MITRE • 14/03/2024

This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: PaperCut
• حجز: 26/02/2024
• إفشاء: 14/03/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-256821
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 6.1 (NVD)
• EPSS: 0.61472
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-1883
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-1883
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-1883/