| Package | Affected versions | Patched versions |
|---|---|---|
| core | ≤ 6.1.0.26 | |
| document server | ≤ 6.0.0 |
Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/fontconverter/FontFileBase.h.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free