Reflected XSS in PaperCut NG/MF
PaperCut · PaperCut NG, PaperCut MF
A reflected cross-site scripting flaw in the PaperCut NG and PaperCut MF application server allows a malicious script to be injected through a crafted URL. An attacker who can get a user to click such a link can cause limited loss of confidentiality, integrity, or availability, requiring no network access beyond reaching the server, no authentication, and user interaction with the link.
This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a script. When an unsuspecting user clicks on this malicious link, it could potentially lead to limited loss of confidentiality, integrity or availability.
- Exploited
- Not confirmed
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
Disclosed on 14 Mar 2024. No public exploit code or confirmed exploitation is recorded.
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.