Onlyoffice Document Server Vulnerabilities

1 advisories affecting Onlyoffice Document Server

1

Total CVEs

1

Critical

0

High

CVE-2021-3199

Jan 26, 2021

Critical 9.8

Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter....

Read Advisory

Never Miss a Critical Alert

CVE advisories, breach reports, and threat intel — delivered daily to your inbox.