CVE-2021-43447

2023-01-2315:15:13

Google

osv.dev

onlyoffice versions access control authentication software

EPSS

0.001

Percentile

37.1%

JSON

ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An authentication bypass in the document editor allows attackers to edit documents without authentication.

References

github.com/ONLYOFFICE/server

labs.nettitude.com/blog/exploiting-onlyoffice-web-sockets-for-unauthenticated-remote-code-execution/

www.onlyoffice.com/

EPSS

0.001

Percentile

37.1%

JSON

Related for OSV:CVE-2021-43447