CVE-2024-9672
Medium
Description
A reflected cross-site scripting (XSS) vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payloads in the browser. A user must click on a malicious link for this issue to occur.
SeverityMedium
CVSS5.4
Exploit probability—
Product
Papercut Mf
PublishedDec 10, 2024
First seenDec 10, 2024
Weakness typeCWE-917Expression language injection
How to fix
Update
- papercut papercut_mf24.1.1 or later
- papercut papercut_ng24.1.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| papercut papercut_mf | v < 24.1.1 | 24.1.1 |
| papercut papercut_ng | v < 24.1.1 | 24.1.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.