Lucene search
MitreCVELIST:CVE-2024-44085HistorySep 09, 2024 - 12:00 a.m.
CVE-2024-44085
2024-09-0900:00:00
mitre
www.cve.org
1
onlyoffice
xss
generatorfunction object
iife
macro
incorrect fix
cve-2024-44085
cve-2021-43446
cve-2023-50883
EPSS
0.001
Percentile
35.5%
ONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunction Object attack against a macro. This is related to use of an immediately-invoked function expression (IIFE) for a macro. NOTE: this issue exists because of an incorrect fix for CVE-2021-43446 and CVE-2023-50883.
Related
nvd
nvd
vulnrichment
vulnrichment
CVE-2024-44085
2024-09-09 00:00:00
CVE-2023-50883
2024-09-09 00:00:00
cve
cve
cvelist
cvelist
CVE-2023-50883
2024-09-09 00:00:00
CVE-2021-43446
2023-01-23 00:00:00
osv
osv
CVE-2021-43446
2023-01-23 15:15:13
prion
prion
Cross site scripting
2023-01-23 15:15:00