PT-2021-16804

Name of the Vulnerable Software and Affected Versions ONLYOFFICE DocumentServer versions 4.0.0 through 5.6.3 Description An improper binary stream data handling issue was found in the core module. This issue allows an attacker to produce a denial of service attack that can eventually shut down th...

CVE-2021-25832: Out-of-bounds Write

A heap buffer overflow vulnerability inside of BMP image processing was found at core module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0. Using this vulnerability, an attacker is able to gain remote code executions on DocumentServer...

PT-2021-31152

Уязвимость офисного онлайн-пакета ONLYOFFICE Docs DocumentServer связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...