VULNERABILITY INTELLIGENCE

CVE-2024-1222

CVSS score8.6 HIGH
EPSS probability63.98%
CISA KEVNot currently listed
Published2024-03-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Description

This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/MF API calls.

Weakness classification

  • eb41dac7-0af8-4f84-9f6d-0272772514f4: CWE-250
  • nvd@nist.gov: NVD-CWE-Other

Primary references