Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-1882

Server-side resource injection in PaperCut NG/MF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
PaperCut

Description

This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for remote code execution on the server hosting the PaperCut NG/MF application server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PaperCut PaperCut NG, PaperCut MF

Default version status: affected

  • 0 to < 23.0.7affected
  • 0 to < 22.1.5affected
  • 0 to < 21.2.14affected
  • 0 to < 20.1.10affected

References