CVE-2021-43444

The CVE-2021-43444 entry concerns ONLYOFFICE: all versions as of 2021-11-08 are affected by Incorrect Access Control due to a weak default URL signing key, enabling forging of signed document download URLs. This is the underlying cause described in the connected records, with a high impact on int...