CVE-2023-2533β€”PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

PUBLISHEDvulnerability record
2025-07-28 Β· last modified July 28, 2025

Metadata

CVE ID:
CVE-2023-2533
Project:
PaperCut
Product:
NG/MF
Date Added:
2025-07-28
Due Date:
2025-08-18
Last Updated:
July 28, 2025

Vulnerability Name

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

Description

PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Additional Notes

  • https://www.papercut.com/kb/Main/SecurityBulletinJune2023
  • https://nvd.nist.gov/vuln/detail/CVE-2023-2533

Related News Articles

Related Weaknesses

browse all CVEs