EXPOSURES › CVE-2023-2533
CVE-2023-2533
HIGH ⌖ ON CISA KEV · EXPLOITEDPaperCut NG/MF had a CSRF vulnerability exploited in the wild, allowing attackers to alter security settings or execute arbitrary code without user consent.
PaperCut NG/MF suffered a CSRF vulnerability that was actively exploited, enabling attackers to manipulate security configurations or run code. This could lead to unauthorized access or data breaches.
Shame score — Active exploitation in the wild without a disclosed patch, posing a high risk to DIB organizations.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code.