CVE-2026-84282

CVE-2026-84282 is a Server-Side Request Forgery (SSRF) vulnerability in the ONLYOFFICE ownCloud Integration plugin version 9.12 . The vulnerable endpoint is /apps/onlyoffice/ajax/settings/address , which fails to sufficiently validate the user-supplied Document Server URL before initiating outbou...