| Package | Affected versions | Patched versions |
|---|---|---|
| document server | = 5.5.0 |
A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can execute arbitrary SQL queries via injection to DocID parameter of Websocket API.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free