Description
This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an attacker to induce the server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| PaperCut | PaperCut NG, PaperCut MF | affected |
|
Configuration 1 [-]
| AND |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Thu, 23 Jan 2025 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Apple
Apple macos Linux Linux linux Kernel Microsoft Microsoft windows Papercut Papercut papercut Mf Papercut papercut Ng |
|
| CPEs | cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:* cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
| Vendors & Products |
Apple
Apple macos Linux Linux linux Kernel Microsoft Microsoft windows Papercut Papercut papercut Mf Papercut papercut Ng |
MITRE
Status: PUBLISHED
Assigner: PaperCut
Published:
Updated: 2024-08-28T15:12:02.085Z
Reserved: 2024-02-26T05:36:24.198Z
Link: CVE-2024-1884
Vulnrichment
Updated: 2024-08-01T18:56:22.318Z
NVD
Status : Analyzed
Published: 2024-03-14T04:15:08.697
Modified: 2025-01-23T21:06:27.910
Link: CVE-2024-1884
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses