CVE-2021-43448

Mô tả

Tham khảo

• ONLYOFFICE/server · Third Party Advisory
• labs.nettitude.com/blog/exploiting-onlyoffice-web-sockets-for-unauthenticated-remote-code-execution · Exploit
• onlyoffice.com · Product

Lỗ hổng khác của server

• CVE-2021-43449CAO 8.1ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery (SSRF). The document editor service can be abused to r…
• CVE-2021-43447CAO 7.5ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An authentication bypass in the document editor allows att…
• CVE-2021-43446TRUNG BÌNH 6.1ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Cross Site Scripting (XSS). The "macros" feature of the document editor allows mal…
• CVE-2021-43445NGHIÊM TRỌNG 9.8ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An attacker can authenticate with the web socket service o…
• CVE-2021-43444CAO 7.5ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. Signed document download URLs can be forged due to a weak …