Improper authorization controls in PaperCut NG/MF
Priority LOW 22CWE-488Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker must already have existing knowledge of some combination of valid usernames, device names and an internal system key. For such an attack to be successful the system must be in a specific runtime state.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00445 38th percentileScored 2026-11-07
Fix Fixed PaperCut NG, PaperCut MF (PaperCut): 23.0.7, 22.1.5, 21.2.14 +1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| PaperCut | PaperCut NG, PaperCut MF | before 23.0.7; before 22.1.5; before 21.2.14; before 20.1.10 | 23.0.7, 22.1.5, 21.2.14, 20.1.10 | Patch available | CNA |
- PaperCut NG, PaperCut MF VendorPaperCut Affected before 23.0.7; before 22.1.5; before 21.2.14; before 20.1.10 Fixed in 23.0.7, 22.1.5, 21.2.14, 20.1.10 Patch available CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:* | before 20.1.10; 21.0.0 to before 21.2.14; 22.0.0 to before 22.1.5; 23.0.1 to before 23.0.7 | Vulnerable | PaperCut |
| cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:* | before 20.1.10; 21.0.0 to before 21.2.14; 22.0.0 to before 22.1.5; 23.0.1 to before 23.0.7 | Vulnerable | PaperCut |
| cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Apple |
| cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Linux |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
- cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:* Versions before 20.1.10; 21.0.0 to before 21.2.14; 22.0.0 to before 22.1.5; 23.0.1 to before 23.0.7 Vulnerable ·PaperCut
- cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:* Versions before 20.1.10; 21.0.0 to before 21.2.14; 22.0.0 to before 22.1.5; 23.0.1 to before 23.0.7 Vulnerable ·PaperCut
- cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Apple
- cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
Remediation
- Fix · CNA PaperCut NG, PaperCut MF (PaperCut) Fixed in 23.0.7, 22.1.5, 21.2.14, 20.1.10
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
PaperCut NG, PaperCut MF 20.1.10, 21.2.14 and 2 more versions
7 records Highest priority Priority HIGH 1 HIGH, 2 MEDIUM, 4 LOW
Other records, highest priority first
- TI-2024-01136 Incorrect authorization controls in PaperCut NG/MF APIsPriority HIGH 84
- TI-2024-01752 Reflected XSS in PaperCut NG/MFPriority MEDIUM 63
- TI-2024-01753 Server Side Request Forgery in PaperCut NG/MFPriority MEDIUM 62
Timeline
- 2026-10-02 Threatist record created from CVE-2024-1223
- 2026-10-03 Alias added: GHSA-vfgc-wr54-m4r5
References
More Papercut Mf vulnerabilities
- TI-2026-56642 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector KEVCVSS 4.0CRITICAL 9.4
- TI-2023-12085 Improper access control in PaperCut NG KEVCVSS 3.1CRITICAL 9.8
- TI-2023-02373 PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF KEVCVSS 3.1HIGH 8.8
- TI-2026-56284 PaperCut MF/NG: Authentication Bypass KEVCVSS 4.0HIGH 8.8
- TI-2023-12086 Improper authentication in PaperCut NG KEVCVSS 3.1HIGH 7.5
- TI-2023-20314 PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-1223 · CVE Program
- CVE-2024-1223 · NVD
- FIRST EPSS
- GHSA-vfgc-wr54-m4r5 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences