CVE-2024-1883
Estado: AnalizadaMedia (6.1)—
This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Puntuación base: 6.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 61%
- Percentil entre todas las CVEs puntuadas: 99
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-76
- CWE-79
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-1883",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-1883",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-03-15T15:24:48.682883Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "LOW",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 3.4,
"exploitabilityScore": 2.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 6.1,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 2.7,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
"affectedData": [
{
"vendor": "PaperCut",
"product": "PaperCut NG, PaperCut MF",
"versions": [
{
"status": "affected",
"changes": [
{
"at": "23.0.7",
"status": "unaffected"
}
],
"version": "0",
"lessThan": "23.0.7",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "22.1.5",
"status": "unaffected"
}
],
"version": "0",
"lessThan": "22.1.5",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "21.2.14",
"status": "unaffected"
}
],
"version": "0",
"lessThan": "21.2.14",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "20.1.10",
"status": "unaffected"
}
],
"version": "0",
"lessThan": "20.1.10",
"versionType": "custom"
}
],
"platforms": [
"MacOS",
"Linux",
"Windows"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2024-03-14T04:15:08.353",
"references": [
{
"url": "https://www.papercut.com/kb/Main/Security-Bulletin-March-2024",
"tags": [
"Vendor Advisory"
],
"source": "eb41dac7-0af8-4f84-9f6d-0272772514f4"
},
{
"url": "https://www.papercut.com/kb/Main/Security-Bulletin-March-2024",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "eb41dac7-0af8-4f84-9f6d-0272772514f4",
"description": [
{
"lang": "en",
"value": "CWE-76"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability."
},
{
"lang": "es",
"value": "Esta es una vulnerabilidad de Cross Site Scripting reflejada en el servidor de aplicaciones PaperCut NG/MF. Un atacante puede aprovechar esta debilidad creando una URL maliciosa que contenga un script. Cuando un usuario desprevenido hace clic en este enlace malicioso, podría provocar una pérdida limitada de confidencialidad, integridad o disponibilidad."
}
],
"lastModified": "2026-06-17T07:05:12.850",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87E57A99-6580-4C5D-AD49-2C77153698B5",
"versionEndExcluding": "20.1.10"
},
{
"criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC862C5A-C51D-455A-BA4C-62AF4B5593D6",
"versionEndExcluding": "21.2.14",
"versionStartIncluding": "21.0.0"
},
{
"criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B444455-3DE9-4268-AED3-9457016B833F",
"versionEndExcluding": "22.1.5",
"versionStartIncluding": "22.0.0"
},
{
"criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06311316-1937-41A4-BEE2-57F7C4F6B6BC",
"versionEndExcluding": "23.0.7",
"versionStartIncluding": "23.0.1"
},
{
"criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7A1BAB4-D3AC-4A06-B2AB-E46DED8CB19D",
"versionEndExcluding": "20.1.10"
},
{
"criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "570DCFBC-7689-4E77-A8BF-8F310545EDE3",
"versionEndExcluding": "21.2.14",
"versionStartIncluding": "21.0.0"
},
{
"criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "728ECAA8-FE3E-4F6D-8862-AF0C100C6699",
"versionEndExcluding": "22.1.5",
"versionStartIncluding": "22.0.0"
},
{
"criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7155AC1E-E4C8-4EF5-B593-7C924AF0C625",
"versionEndExcluding": "23.0.7",
"versionStartIncluding": "23.0.1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
},
{
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "eb41dac7-0af8-4f84-9f6d-0272772514f4"
}