CVE-2023-30186

The CVE-2023-30186 issue affects ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2, due to a use-after-free in the JavaScript File Handler component that allows remote attackers to execute arbitrary code by delivering a crafted JavaScript file. Affected product: ONLYOFFICE DocumentServer; vu...

CVE-2023-30188

The CVE-2023-30188 entry concerns ONLYOFFICE Document Server versions 4.0.3–7.3.2. The vulnerability is a memory exhaustion issue in the JavaScript File Handler component triggered by a crafted JavaScript file, enabling remote attackers to cause a denial of service. No exploit details are provide...

CVE-2023-30187

The CVE-2023-30187 issue affects ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2, where an out-of-bounds memory access in the JavaScript File Handler component can be exploited by a crafted JavaScript file to execute arbitrary code remotely. Impact is described as remote code execution wit...