CVE-2024-1222

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Mar 14, 2024
Source updated: Sep 26, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Incorrect authorization controls in PaperCut NG/MF APIs

This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/MF API calls.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

PaperCut NG, PaperCut MF

Vendor: PaperCut
Product: PaperCut NG, PaperCut MF
Platforms: MacOS
Linux
Windows
Default status: affected

PaperCut NG, PaperCut MF · Scoped product and version facts
Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
`affected`	custom	23.0.7	Unavailable	`23.0.7` → `unaffected`
`affected`	custom	22.1.5	Unavailable	`22.1.5` → `unaffected`
`affected`	custom	21.2.14	Unavailable	`21.2.14` → `unaffected`
`affected`	custom	20.1.10	Unavailable	`20.1.10` → `unaffected`