CVE-2024-1883 in PaperCut

Résumé

par MITRE • 14/03/2024

This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability.

Once again VulDB remains the best source for vulnerability data.

• Responsable: PaperCut
• Réserver: 26/02/2024
• Divulgation: 14/03/2024
• Modérer: accepté
• Entrée: VDB-256821
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 6.1 (NVD)
• EPSS: 0.61472
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-1883
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-1883
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-1883/