EUVD-2023-34613

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Memory Exhaustion vulnerability in ONLYOFFICE Document Server allows denial of service via JavaScript file

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2023-30188	14 Aug 202313:15	–	attackerkb
Circl	CVE-2023-30188	14 Aug 202316:19	–	circl
CNNVD	Ascensio System ONLYOFFICE Document Server Security Vulnerability	14 Aug 202300:00	–	cnnvd
CVE	CVE-2023-30188	14 Aug 202300:00	–	cve
Cvelist	CVE-2023-30188	14 Aug 202300:00	–	cvelist
NVD	CVE-2023-30188	14 Aug 202313:15	–	nvd
Prion	Privilege escalation	14 Aug 202313:15	–	prion
Positive Technologies	PT-2023-4392 · Onlyoffice · Onlyoffice Document Server	14 Aug 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-30188	23 May 202506:05	–	redhatcve
Vulnrichment	CVE-2023-30188	14 Aug 202300:00	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "f531f1ec-95f3-34ed-bee7-7bb224335976",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "33784767-f587-3201-a2eb-fd4c42618210",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
github	www.github.com/ONLYOFFICE/DocumentServer
onlyoffice	www.onlyoffice.com/
github	www.github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/
github	www.github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/embed/NativeControlEmbed.cpp
github	www.github.com/ONLYOFFICE/core/commit/2b6ad83b36afd9845085b536969d366d1d61150a
gist	www.gist.github.com/merrychap/25eba8c4dd97c9e545edad1b8f0eadc2

03 Oct 2025 20:07Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.01056

SSVC