PT-2023-4141 · Onlyoffice · Onlyoffice Community Server

Name of the Vulnerable Software and Affected Versions: Onlyoffice Community Server versions prior to 12.5.2 Description: The issue is related to a remote code execution vulnerability in the UploadProgress.ashx component. It is associated with errors in handling the relative path to a directory wi...