EUVD-2023-34612

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Out of bounds memory access in ONLYOFFICE DocumentServer allows remote code execution via JavaScript.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2023-30187	14 Aug 202313:15	–	attackerkb
Circl	CVE-2023-30187	14 Aug 202316:19	–	circl
CNNVD	Ascensio System ONLYOFFICE Buffer Error Vulnerability	14 Aug 202300:00	–	cnnvd
CVE	CVE-2023-30187	14 Aug 202300:00	–	cve
Cvelist	CVE-2023-30187	14 Aug 202300:00	–	cvelist
NVD	CVE-2023-30187	14 Aug 202313:15	–	nvd
Prion	Improper access control	14 Aug 202313:15	–	prion
Positive Technologies	PT-2023-4393 · Onlyoffice · Onlyoffice Document Server	14 Aug 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-30187	23 May 202502:49	–	redhatcve
Vulnrichment	CVE-2023-30187	14 Aug 202300:00	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "6f0d2f67-7864-3647-aa0a-36a86592f685",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "99b94d50-c7c4-3100-b630-2cac49576711",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
github	www.github.com/ONLYOFFICE/DocumentServer
onlyoffice	www.onlyoffice.com/
github	www.github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/
github	www.github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/embed/NativeControlEmbed.cpp
github	www.github.com/ONLYOFFICE/core/commit/2b6ad83b36afd9845085b536969d366d1d61150a
gist	www.gist.github.com/merrychap/25eba8c4dd97c9e545edad1b8f0eadc2

03 Oct 2025 20:07Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.8

EPSS0.02334

SSVC