6.1
CVE-2024-1883
- EPSS 61.47%
- Veröffentlicht 14.03.2024 04:15:08
- Zuletzt bearbeitet 23.01.2025 21:06:04
- Erkennungen
LoginReflected XSS in PaperCut NG/MF
This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Papercut ≫ Papercut Mf Version < 20.1.10
Papercut ≫ Papercut Mf Version >= 21.0.0 < 21.2.14
Papercut ≫ Papercut Mf Version >= 22.0.0 < 22.1.5
Papercut ≫ Papercut Mf Version >= 23.0.1 < 23.0.7
Papercut ≫ Papercut Ng Version < 20.1.10
Papercut ≫ Papercut Ng Version >= 21.0.0 < 21.2.14
Papercut ≫ Papercut Ng Version >= 22.0.0 < 22.1.5
Papercut ≫ Papercut Ng Version >= 23.0.1 < 23.0.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 61.47% | 0.991 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.1 | 2.8 | 2.7 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
|
| eb41dac7-0af8-4f84-9f6d-0272772514f4 | 6.3 | 2.8 | 3.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
|
CWE-76 Improper Neutralization of Equivalent Special Elements
The product correctly neutralizes certain special elements, but it improperly neutralizes equivalent special elements.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
https://www.papercut.com/kb/Main/Security-Bulletin-March-2024