CVE-2024-8405

5.5 mediumEPSS 0.2%

Medium (5.5) in papercut. EPSS 0.2% chance of exploitation in the next 30 days.

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the web-print.exe process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can be used to flood disk space and result in a Denial of Service (DoS) attack. Note: This CVE has been split from CVE-2024-4712.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2024-09-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

papercut:papercut_mf
papercut:papercut_ng

References

https://www.papercut.com/kb/Main/Security-Bulletin-May-2024/

Check your stack JSON