Read the docs
TI-2024-01752 Aliases CVE-2024-1883GHSA-6xfp-26pf-r3p6

Reflected XSS in PaperCut NG/MF

Priority MEDIUM 63CWE-76Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.61472 99th percentileScored 2026-11-07
Fix Fixed PaperCut NG, PaperCut MF (PaperCut): 23.0.7, 22.1.5, 21.2.14 +1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
PaperCutPaperCut NG, PaperCut MFbefore 23.0.7; before 22.1.5; before 21.2.14; before 20.1.1023.0.7, 22.1.5, 21.2.14, 20.1.10Patch availableCNA
  • PaperCut NG, PaperCut MF VendorPaperCut Affected before 23.0.7; before 22.1.5; before 21.2.14; before 20.1.10 Fixed in 23.0.7, 22.1.5, 21.2.14, 20.1.10 Patch available CNA

CPE configurations NVD · 5

CPEVersionsRoleVendor
cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*before 20.1.10; 21.0.0 to before 21.2.14; 22.0.0 to before 22.1.5; 23.0.1 to before 23.0.7VulnerablePaperCut
cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*before 20.1.10; 21.0.0 to before 21.2.14; 22.0.0 to before 22.1.5; 23.0.1 to before 23.0.7VulnerablePaperCut
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*not specified by NVDRunning onApple
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*not specified by NVDRunning onLinux
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
  • cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:* Versions before 20.1.10; 21.0.0 to before 21.2.14; 22.0.0 to before 22.1.5; 23.0.1 to before 23.0.7 Vulnerable ·PaperCut
  • cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:* Versions before 20.1.10; 21.0.0 to before 21.2.14; 22.0.0 to before 22.1.5; 23.0.1 to before 23.0.7 Vulnerable ·PaperCut
  • cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Apple
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

  • Fix · CNA PaperCut NG, PaperCut MF (PaperCut) Fixed in 23.0.7, 22.1.5, 21.2.14, 20.1.10

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    PaperCut NG, PaperCut MF 20.1.10, 21.2.14 and 2 more versions

    7 records Highest priority Priority HIGH 1 HIGH, 2 MEDIUM, 4 LOW

    Other records, highest priority first

    • TI-2024-01136 Incorrect authorization controls in PaperCut NG/MF APIsPriority HIGH 84
    • TI-2024-01753 Server Side Request Forgery in PaperCut NG/MFPriority MEDIUM 62
    • TI-2024-01751 Server-side resource injection in PaperCut NG/MFPriority LOW 37
    Show all 7 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-1883
  2. 2026-10-03 Alias added: GHSA-6xfp-26pf-r3p6

References

Advisory 1

  • TI-2026-56642 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector KEVCVSS 4.0CRITICAL 9.4
  • TI-2023-12085 Improper access control in PaperCut NG KEVCVSS 3.1CRITICAL 9.8
  • TI-2023-02373 PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF KEVCVSS 3.1HIGH 8.8
  • TI-2026-56284 PaperCut MF/NG: Authentication Bypass KEVCVSS 4.0HIGH 8.8
  • TI-2023-12086 Improper authentication in PaperCut NG KEVCVSS 3.1HIGH 7.5
  • TI-2023-20314 PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling… CVSS 3.1CRITICAL 9.8
See all 30 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences