CVE-2023-2533

Published Jun 20, 2023

Last updated 5 days ago

PaperCut

Overview

AI description

Automated description summarized from trusted sources.

CVE-2023-2533 is a Cross-Site Request Forgery (CSRF) vulnerability affecting PaperCut NG/MF print management solutions. It stems from a security flaw that could allow attackers to manipulate system configurations and potentially gain unauthorized access to organizational networks. Under specific conditions, this vulnerability could enable an attacker to alter security settings or execute arbitrary code. Exploitation typically involves deceiving an administrator with an active login session into clicking a specially crafted, malicious link, potentially leading to unauthorized changes. CISA has added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, indicating that it is being actively exploited in the wild.

Description: A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session. Exploiting this would typically involve the possibility of deceiving an admin into clicking a specially crafted malicious link, potentially leading to unauthorized changes.
Source: help@fluidattacks.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability
Exploit added on: Jul 28, 2025
Exploit action due: Aug 18, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

help@fluidattacks.com: CWE-352
nvd@nist.gov: CWE-352

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C32F194D-D229-4694-B8AD-94BB7B427378",
            "versionEndExcluding": "20.1.8"
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "373E06E9-6AAB-45D4-84FE-B12BB48086D7",
            "versionEndExcluding": "21.2.12",
            "versionStartIncluding": "21.0.0"
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_mf:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B94F9EC5-EC1D-47CB-ABDA-90845C4485AA",
            "versionEndExcluding": "22.1.1",
            "versionStartIncluding": "22.0.0"
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E79D1429-D66B-4A09-8375-B92D667D54A3",
            "versionEndExcluding": "20.1.8"
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BBE00F06-73FB-4A8D-8C34-54517A08CA7A",
            "versionEndExcluding": "21.2.12",
            "versionStartIncluding": "21.0.0"
          },
          {
            "criteria": "cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BF6B8BA0-F12A-4CD7-8B99-58F7B32ED08E",
            "versionEndIncluding": "22.1.1",
            "versionStartIncluding": "22.0.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.