Lucene search
K

5 matches found

BDU FSTEC
BDU FSTEC
added 2023/08/18 12:0 a.m.5 views

The vulnerability of the JavaScript File Handler component in the office online package ONLYOFFICE DocumentServer allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript File Handler component in the ONLYOFFICE DocumentServer online package relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by launching a specially crafted JavaScri...

7.8CVSS8.6AI score0.01856EPSS
Exploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/18 12:0 a.m.2 views

The vulnerability of the JavaScript File Handler component in the office online package ONLYOFFICE DocumentServer allows a hacker to trigger a service failure.

The vulnerability of the JavaScript File Handler component in the ONLYOFFICE DocumentServer online package is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure by executing a specially crafted JavaScript file...

5.5CVSS7.1AI score0.01753EPSS
Exploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/16 12:0 a.m.7 views

The vulnerability of the JavaScript File Handler component in the office online package ONLYOFFICE DocumentServer allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript File Handler component in the ONLYOFFICE DocumentServer office online package is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by running a specially crafted JavaScript file...

9CVSS8.1AI score0.01805EPSS
Exploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/14 12:0 a.m.4 views

PT-2023-4392 · Onlyoffice · Onlyoffice Document Server

Name of the Vulnerable Software and Affected Versions: ONLYOFFICE Document Server versions 4.0.3 through 7.3.2 Description: The issue is related to a Memory Exhaustion vulnerability in the JavaScript File Handler component of ONLYOFFICE Document Server. This vulnerability allows remote attackers ...

7.5CVSS7.3AI score0.01753EPSS
Exploits1References13
Positive Technologies
Positive Technologies
added 2023/08/14 12:0 a.m.7 views

PT-2023-4363 · Onlyoffice · Onlyoffice Document Server

Name of the Vulnerable Software and Affected Versions: ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2 Description: A use after free issue in ONLYOFFICE DocumentServer allows remote attackers to run arbitrary code via a crafted JavaScript file. This issue is related to the JavaScript File...

9.8CVSS9.4AI score0.01805EPSS
Exploits1References16
Rows per page
Query Builder