CVE Watch—

CVE-2023-2533

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

CVSS

—

Sin CVSS

EPSS

28.6%

p98

KEV

SÍ

28 jul 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

28.6%EPSS · 30 días29.2%

2026-09-172026-10-15

Ficha del catálogo KEV

Producto

PaperCut / NG/MF

Vulnerabilidad

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

Añadido a KEV

28 jul 2025

Remediar antes de

18 ago 2025

Uso conocido en ransomware

Descripción resumida

PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://www.papercut.com/kb/Main/SecurityBulletinJune2023 ; https://nvd.nist.gov/vuln/detail/CVE-2023-2533

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-820789.1 CRÍ

99.2%

KEV—80PaperCut NG/MF Unsafe Reflection Vulnerability32d CVE-2026-815789.8 CRÍ

99.7%

KEV—80PaperCut NG/MF Missing Authentication for Critical Function Vulnerability32d CVE-2023-273517.5 ALT

99.6%

KEV—80PaperCut NG/MF Improper Authentication Vulnerability15d