CVE-2023-46988

CVE-2023-46988 is a path-traversal vulnerability in ONLYOFFICE Document Server prior to 8.0.1. The issue allows a remote attacker to copy arbitrary files by manipulating the fileExt parameter at the /example/editor endpoint, potentially leading to unauthorized access to sensitive files (and DoS)....