Reflected Cross-Site Scripting Vulnerability Affects PaperCut NG/MF
CVE-2024-9672

5.4MEDIUM

Key Information:

Vendor
PaperCut NG/MF
Status
Papercut Mf
Papercut Ng
Vendor
CVE Published:
10 December 2024

Summary

A reflected cross-site scripting (XSS) vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payloads in the browser. A user must click on a malicious link for this issue to occur.

References

https://www.papercut.com/kb/Main/security-bulletin-decemb...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.