CVE Watch—

CVE-2023-2533

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

CVSS

—

Sin CVSS

EPSS

29.2%

p98

KEV

SÍ

28 jul 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

29.2%EPSS · 30 días29.5%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

PaperCut / NG/MF

Vulnerabilidad

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

Añadido a KEV

28 jul 2025

Remediar antes de

18 ago 2025

Uso conocido en ransomware

Descripción resumida

PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://www.papercut.com/kb/Main/SecurityBulletinJune2023 ; https://nvd.nist.gov/vuln/detail/CVE-2023-2533

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2023-27351—

99.5%

KEV—80PaperCut NG/MF Improper Authentication Vulnerability—