CVE-2024-1882

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Mar 14, 2024
Source updated: Sep 26, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Server-side resource injection in PaperCut NG/MF

This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for remote code execution on the server hosting the PaperCut NG/MF application server.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

PaperCut NG, PaperCut MF

Vendor: PaperCut
Product: PaperCut NG, PaperCut MF
Platforms: MacOS
Linux
Windows
Default status: affected

PaperCut NG, PaperCut MF · Scoped product and version facts
Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
`affected`	custom	23.0.7	Unavailable	`23.0.7` → `unaffected`
`affected`	custom	22.1.5	Unavailable	`22.1.5` → `unaffected`
`affected`	custom	21.2.14	Unavailable	`21.2.14` → `unaffected`
`affected`	custom	20.1.10	Unavailable	`20.1.10` → `unaffected`