Server-Side Request Forgery (SSRF) Vulnerability Affects PaperCut NG/MF Server-Side Module
CVE-2024-1884

6.5MEDIUM

Key Information:

Vendor
Papercut
Status
Papercut Ng, Papercut Mf
Vendor
CVE Published:
14 March 2024

Summary

This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an attacker to induce the server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing.

Affected Version(s)

PaperCut NG, PaperCut MF MacOS 0

PaperCut NG, PaperCut MF MacOS 0 < 23.0.7

PaperCut NG, PaperCut MF MacOS 0 < 22.1.5

References

https://www.papercut.com/kb/Main/Security-Bulletin-March-...

EPSS Score

43% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.