CVE-2024-1221

Published Mar 14, 2024

Last updated 2 months ago

Overview

Description
This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some reconnaissance to gain knowledge of a system token. This CVE only affects Linux and macOS PaperCut NG/MF servers.
Source
eb41dac7-0af8-4f84-9f6d-0272772514f4
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
3.1
Impact score
1.4
Exploitability score
1.6
Vector string
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Severity
LOW

Weaknesses

eb41dac7-0af8-4f84-9f6d-0272772514f4
CWE-76

Social media

Hype score
Not currently trending