CVE-2024-1884

MEDIUM

PaperCut NG/MF < 20.1.10 - Server-Side Request Forgery

Title source: llm

Description

This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an attacker to induce the server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing.

References (1)

Core 1

Core References

Vendor Advisory

https://www.papercut.com/kb/Main/Security-Bulletin-March-2024

Scores

CVSS v3 6.5

EPSS 0.3793

EPSS Percentile 98.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-918

Status published

Products (2)

papercut/papercut_mf < 20.1.10

papercut/papercut_ng < 20.1.10

Published Mar 14, 2024

Tracked Since Feb 18, 2026