What is the severity of CVE-2024-9672?

CVE-2024-9672 has been classified as a reflected cross-site scripting (XSS) vulnerability, which can be exploited to execute arbitrary JavaScript in a user's browser.

How do I fix CVE-2024-9672?

To fix CVE-2024-9672, it is recommended to update PaperCut NG/MF to version 24.1.1 or later.

What are the affected versions for CVE-2024-9672?

CVE-2024-9672 affects PaperCut NG and PaperCut MF versions up to 24.1.1.

What could attackers do with CVE-2024-9672?

Attackers can leverage CVE-2024-9672 to execute harmful JavaScript code in the context of a user's session, potentially stealing information or performing actions on their behalf.

Who needs to be concerned about CVE-2024-9672?

Organizations using PaperCut NG or PaperCut MF should be concerned about CVE-2024-9672 due to the potential for exploitation through user interaction with malicious links.

Vulnerability/
CVE-2024-9672

medium

6.3

CWE

917 79

EPSS

0.061%

9/12/2024

30/1/2025

CVE-2024-9672: Reflected XSS in PaperCut MF

First published: Mon Dec 09 2024(Updated: )

A reflected cross-site scripting (XSS) vulnerability exists in PaperCut NG/MF. This issue can be used to execute specially created JavaScript payloads in the browser. A user must click on a malicious link for this issue to occur.

Credit: eb41dac7-0af8-4f84-9f6d-0272772514f4

Affected Software	Affected Version	How to fix
PaperCut MF
PaperCut NG/MF
PaperCut MF	<24.1.1
PaperCut NG	<24.1.1

Never miss a vulnerability like this again

Reference Links

https://www.papercut.com/kb/Main/security-bulletin-december-2024/

Frequently Asked Questions

What is the severity of CVE-2024-9672?
CVE-2024-9672 has been classified as a reflected cross-site scripting (XSS) vulnerability, which can be exploited to execute arbitrary JavaScript in a user's browser.
How do I fix CVE-2024-9672?
To fix CVE-2024-9672, it is recommended to update PaperCut NG/MF to version 24.1.1 or later.
What are the affected versions for CVE-2024-9672?
CVE-2024-9672 affects PaperCut NG and PaperCut MF versions up to 24.1.1.
What could attackers do with CVE-2024-9672?
Attackers can leverage CVE-2024-9672 to execute harmful JavaScript code in the context of a user's session, potentially stealing information or performing actions on their behalf.
Who needs to be concerned about CVE-2024-9672?
Organizations using PaperCut NG or PaperCut MF should be concerned about CVE-2024-9672 due to the potential for exploitation through user interaction with malicious links.

agent/references
agent/title
agent/description
agent/weakness
agent/type
agent/first-publish-date
agent/author
collector/mitre-cve
source/MITRE
agent/trending
collector/epss-latest
source/FIRST
agent/epss
agent/source
agent/guess-ai
agent/software-canonical-lookup
agent/severity
agent/last-modified-date
agent/softwarecombine
agent/tags
agent/event
collector/nvd-api
source/NVD
vendor/papercut
canonical/papercut mf
canonical/papercut ng/mf
canonical/papercut ng

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.