CVE Watch—

CVE-2023-2533

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

CVSS

—

No CVSS

EPSS

28.6%

p98

KEV

YES

Jul 28, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

28.6%EPSS · 30 days29.2%

2026-09-162026-10-14

KEV catalog record

Product

PaperCut / NG/MF

Vulnerability

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

Added to KEV

Jul 28, 2025

Remediate by

Aug 18, 2025

Known ransomware use

Summary description

PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://www.papercut.com/kb/Main/SecurityBulletinJune2023 ; https://nvd.nist.gov/vuln/detail/CVE-2023-2533

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-820789.1 CRI

99.2%

KEV—80PaperCut NG/MF Unsafe Reflection Vulnerability32d CVE-2026-815789.8 CRI

99.7%

KEV—80PaperCut NG/MF Missing Authentication for Critical Function Vulnerability32d CVE-2023-273517.5 HIG

99.6%

KEV—80PaperCut NG/MF Improper Authentication Vulnerability14d