CVE-2024-4712 Arbitrary File Creation in PaperCut NG/MF Web Print Image Handler

What is CVE-2024-4712?

CVE-2024-4712 is a high-severity vulnerability in PaperCut NG, PaperCut MF, published on 14 May 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the image-handler process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can lead to local privilege escalation.

Note:

This CVE has been split into two (CVE-2024-4712 and CVE-2024-8405) and it’s been rescored with a "Privileges Required (PR)" rating of low, and “Attack Complexity (AC)” rating of low, reflecting the worst-case scenario where an Administrator has granted local login access to standard network users on the host server.

Weakness: CWE-77

Which versions are affected by CVE-2024-4712?

It affects 2 products.

Products include Papercut Papercut Mf, Papercut Papercut Ng.

How do I fix CVE-2024-4712?

No fix has been published for CVE-2024-4712 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-4712 being exploited?

There is no known exploitation of CVE-2024-4712 in the wild and no public exploit code.

Other vulnerabilities in PaperCut NG, PaperCut MF

• CVE-2023-27350 PaperCut MF/NG Improper Access Control Exploited Critical 9.8
• CVE-2026-82078 PaperCut NG/MF Unsafe Reflection Exploited Critical 9.4
• CVE-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Exploited High 8.8
• CVE-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF) Exploited High 8.4
• CVE-2023-27351 PaperCut NG/MF Improper Authentication Exploited High 8.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-j448-jqj7-gh7x.