CVE-2024-1882CWE-76

Server-side resource injection in PaperCut NG/MF

High · published March 14, 2024

CVSS v3.1
7.2
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for remote code execution on the server hosting the PaperCut NG/MF application server.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01411 · 72.5th percentile
Weakness
CWE-76 · Improper Neutralization of Equivalent Special Elements
Published
2024-03-14T03:08Z
EPSS history
Timeline
  • 14 MAR 03:08Z
    Server-side resource injection in PaperCut NG/MF
    cvelistv5