CISA KEV · Known exploitedHigh

CVE-2023-2533

PaperCut NG/MF

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an admin with a current login session. Exploiting this would typically involve the possibility of deceiving an admin into clicking a specially crafted malicious link, potentially leading to unauthorized changes.

CVSS: 8.8
EPSS: 29.2%
CISA KEV: Listed
Published: 2023.06.21

PRIORITY ASSESSMENT

Immediate review

CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.

Known exploitationConfirmed by CISA KEV

Exploit probability29.2%

Technical severityCVSS 8.8

Vulnerability overview

Affected product and versions

Product: PaperCut NG/MF
Affected versions: 22.0.10, < 20.1.8, >= 21.0.0 < 21.2.12, >= 22.0.0 < 22.1.1, >= 22.0.0 <= 22.1.1
Fixed versions: 20.1.8, 21.2.12, 22.1.1

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Due date: 2025.08.18

1
Identify
Confirm that PaperCut NG/MF and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE: CWE-352
KEV added: 2025.07.28
Ransomware use: 미확인