CVE-2021-25831

creationtimestamp| type| source ---|---|--- 2021-03-01 18:43:15+00:00| seen| https://t.me/cibsecurity/24297 2021-10-30 14:32:34+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4625...

CVE-2021-25831

ONLYOFFICE DocumentServer (core module) vulnerability CVE-2021-25831 affects v4.0.0-9-v5.6.3. A file extension handling issue arises when converting a crafted PPTT file to PPTX, exploited through a chain of two other improper string handling bugs to achieve remote code execution on the server. Th...