CVE-2023-2533

PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

PaperCut — NG/MF

Added to KEV catalog: 28 July 2025
Federal remediation due date: 18 August 2025
Weakness classification (CWE): CWE-352

CISA Description

PaperCut NG/MF contains a cross-site request forgery (CSRF) vulnerability, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://www.papercut.com/kb/Main/SecurityBulletinJune2023 ; https://nvd.nist.gov/vuln/detail/CVE-2023-2533

View on NVD View on MITRE CVE View full CISA catalog

More PaperCut Vulnerabilities

CVE-2023-27351

PaperCut NG/MF Improper Authentication Vulnerability

CVE-2023-27350

PaperCut MF/NG Improper Access Control Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services