PT-2024-39754 · Papercut · Papercut Ng/Mf

Andrej Simko · Published 2024-12-09 · Updated 2025-01-30 · CVE-2024-9672

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions PaperCut NG/MF (affected versions not specified)

Description A reflected cross-site scripting (XSS) issue exists, allowing specially crafted JavaScript payloads to be executed in the browser. This occurs when a user clicks on a malicious link.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-917

CWE-79

Related Identifiers

CVE-2024-9672

Affected Products

Papercut Ng/Mf

References · 8

• https://papercut.com/kb/Main/security-bulletin-december-2024 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-9672 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-9672 · Security Note
• https://twitter.com/VulmonFeeds/status/1866361504351523101 · Twitter Post
• https://twitter.com/CVEnew/status/1866432931436044581 · Twitter Post
• https://t.me/cvenotify/103677 · Telegram Post
• https://t.me/cvedetector/12473 · Telegram Post
• https://t.me/cvenotify/109170 · Telegram Post