CVE-2022-48422

ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgccs.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located...

CVE-2022-48422

ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgccs.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located...

CVE-2022-48422

CVE-2022-48422 affects ONLYOFFICE Docs up to version 7.3 on certain Linux distributions. The vulnerability arises from a Trojan horse libgcc_s.so.1 placed in the current working directory, which an ONLYOFFICE document can reside in, allowing local privilege escalation. Connected sources consisten...