CVE-2022-24229

2022-04-0812:15:08

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor.

CPENameOperatorVersion
documentservereqONLYOFFICE-DocumentServer-5.1.5
documentservereqONLYOFFICE-DocumentServer-5.3.1
documentservereqONLYOFFICE-DocumentServer-6.0.2
documentservereqONLYOFFICE-DocumentServer-4.0.2-4
documentservereqONLYOFFICE-DocumentServer-4.3.4
documentservereq6.4.2
documentservereqONLYOFFICE-DocumentServer-5.1.1
documentservereqONLYOFFICE-DocumentServer-5.4.0-2
documentservereqONLYOFFICE-DocumentServer-4.3.6
documentservereqONLYOFFICE-DocumentServer-4.1.8-1

Name	Operator	Version
documentserver	eq	ONLYOFFICE-DocumentServer-5.1.5
documentserver	eq	ONLYOFFICE-DocumentServer-5.3.1
documentserver	eq	ONLYOFFICE-DocumentServer-6.0.2
documentserver	eq	ONLYOFFICE-DocumentServer-4.0.2-4
documentserver	eq	ONLYOFFICE-DocumentServer-4.3.4
documentserver	eq	6.4.2
documentserver	eq	ONLYOFFICE-DocumentServer-5.1.1
documentserver	eq	ONLYOFFICE-DocumentServer-5.4.0-2
documentserver	eq	ONLYOFFICE-DocumentServer-4.3.6
documentserver	eq	ONLYOFFICE-DocumentServer-4.1.8-1