Document Server@* Security Vulnerabilities and Issues — Document Server@* CVE List

Lucene search

OnlyofficeDocument Server*

3 matches found

CVE•added 2022/04/08 12:15 p.m.•82 views

CVE-2022-24229

A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor.

6.1CVSS5.9AI score0.00352EPSS

CVE•added 2022/06/02 2:15 p.m.•71 views

CVE-2022-29777

Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/fontconverter/FontFileBase.h.

9.8CVSS9.7AI score0.17543EPSS

CVE•added 2022/06/02 2:15 p.m.•56 views

CVE-2022-29776

Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktopEditor/common/File.cpp.

9.8CVSS9.7AI score0.17543EPSS