VULNERABILITY INTELLIGENCE

CVE-2024-1221

CVSS score3.1 LOW
EPSS probability0.55%
CISA KEVNot currently listed
Published2024-03-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

This vulnerability potentially allows files on a PaperCut NG/MF server to be exposed using a specifically formed payload against the impacted API endpoint. The attacker must carry out some reconnaissance to gain knowledge of a system token. This CVE only affects Linux and macOS PaperCut NG/MF servers.

Weakness classification

  • eb41dac7-0af8-4f84-9f6d-0272772514f4: CWE-76
  • nvd@nist.gov: NVD-CWE-Other

Primary references