CVE Watch—

CVE-2023-2533

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

CVSS

—

Sem CVSS

EPSS

28.8%

p98

KEV

SIM

28 de jul. de 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

28.6%EPSS · 30 dias28.8%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

PaperCut / NG/MF

Vulnerabilidade

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

Adicionado ao KEV

28 de jul. de 2025

Corrigir até

18 de ago. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://www.papercut.com/kb/Main/SecurityBulletinJune2023 ; https://nvd.nist.gov/vuln/detail/CVE-2023-2533

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-820789.1 CRÍ

99.2%

KEV—80PaperCut NG/MF Unsafe Reflection Vulnerability53d CVE-2026-815789.8 CRÍ

99.7%

KEV—80PaperCut NG/MF Missing Authentication for Critical Function Vulnerability53d CVE-2023-273517.5 ALT

99.6%

KEV—80PaperCut NG/MF Improper Authentication Vulnerability35d