NetSight
medium6.5

CVE-2024-1884

This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an attacker to induce the server-side applicati…

Impact

This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an attacker to induce the server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing.

Affected products

VendorProductAffected versions
PapercutPapercut Mf
before 20.1.10
from 21.0.0 before 21.2.14
from 22.0.0 before 22.1.5
from 23.0.1 before 23.0.7
PapercutPapercut Ng
before 20.1.10
from 21.0.0 before 21.2.14
from 22.0.0 before 22.1.5
from 23.0.1 before 23.0.7

Weakness classification

References