Lucene search
MitreCVELIST:CVE-2022-45175HistoryApr 14, 2023 - 12:00 a.m.
CVE-2022-45175
2023-04-1400:00:00
mitre
www.cve.org
1
cve-2022-45175
onlyoffice
unauthenticated user
cached files
insecure direct object reference
EPSS
0.001
Percentile
30.7%
An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Insecure Direct Object Reference can occur under the 5.6.5-3/doc/{ID-FILE]/c/{N]/{C]/websocket endpoint. A malicious unauthenticated user can access cached files in the OnlyOffice backend of other users by guessing the file ID of a target file.
References
Related
cve
cve
CVE-2022-45175
2023-04-14 14:15:10
prion
prion
Design/Logic Flaw
2023-04-14 14:15:00
alpinelinux
alpinelinux
CVE-2022-45175
2023-04-14 14:15:10
nvd
nvd
CVE-2022-45175
2023-04-14 14:15:10