VulnerabilityAnalyzed

CVE-2024-1221

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint.

LOW 3.1EPSS 0.55%

Does this matter?

Lower severity and a low EPSS score (0.55%). Track it; it rarely justifies an emergency change on its own.

Description

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some reconnaissance to gain knowledge of a system token. This CVE only affects Linux and macOS PaperCut NG/MF servers.

CVSS 3.1: 3.1 LOWCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.55% probability · 44th percentile
CISA KEV: Not listed
Weakness: CWE-76
Affected: papercut/papercut mf · papercut/papercut ng
Source: eb41dac7-0af8-4f84-9f6d-0272772514f4

References

https://www.papercut.com/kb/Main/Security-Bulletin-March-2024Vendor Advisory
https://www.papercut.com/kb/Main/Security-Bulletin-March-2024Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.