MEDIUM🇵🇱 Wersja polska

CVE-2024-1883

CVSS 6.3v3.1pub. 2024-03-14upd. 2025-01-23

This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

  • Apple macOS

    OS
    Apple
    all versions

  • Linux Kernel

    OS
    Linux
    all versions

  • Microsoft Windows

    OS
    Microsoft
    all versions

  • Papercut Mf

    APP
    Papercut
    23.0.1 – 23.0.7 (excl.)< 20.1.1021.0.0 – 21.2.14 (excl.)22.0.0 – 22.1.5 (excl.)

  • Papercut Ng

    APP
    Papercut
    23.0.1 – 23.0.7 (excl.)22.0.0 – 22.1.5 (excl.)21.0.0 – 21.2.14 (excl.)< 20.1.10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2026-82078CRITICAL9.4⚠ KEVsame product

An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and P...

CVE-2026-65400CRITICAL9.8⚠ KEVPL ✓same product

Pominięcie uwierzytelniania w Screen Sharing na macOS

CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓same product

Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-43300CRITICAL10.0⚠ KEVPL ✓same product

Apple iOS/iPadOS/macOS — out-of-bounds write przy przetwarzaniu obrazu