Vulnerability Description
This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Papercut | Papercut Mf | < 20.1.10 |
| Papercut | Papercut Ng | < 20.1.10 |
| Apple | Macos | - |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- https://www.papercut.com/kb/Main/Security-Bulletin-March-2024Vendor Advisory
- https://www.papercut.com/kb/Main/Security-Bulletin-March-2024Vendor Advisory
FAQ
What is CVE-2024-1883?
CVE-2024-1883 is a vulnerability with a CVSS score of 6.3 (MEDIUM). This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsus...
How severe is CVE-2024-1883?
CVE-2024-1883 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-1883?
Check the references section above for vendor advisories and patch information. Affected products include: Papercut Papercut Mf, Papercut Papercut Ng, Apple Macos, Linux Linux Kernel, Microsoft Windows.