CVE-2023-30188

Mô tả

Tham khảo

• gist.github.com/merrychap/25eba8c4dd97c9e545edad1b8f0eadc2 · Exploit
• ONLYOFFICE/DocumentServer · Product
• ONLYOFFICE/core · Product
• ONLYOFFICE/core · Not Applicable
• ONLYOFFICE/core commit 2b6ad83 · Patch

Lỗ hổng khác của document server

• CVE-2025-68936TRUNG BÌNH 6.1ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer.
• CVE-2025-68935TRUNG BÌNH 6.1ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer.
• CVE-2023-46988TRUNG BÌNH 6.7Path Traversal vulnerability in ONLYOFFICE Document Server before v8.0.1 allows a remote attacker to copy arbitrary files by manipulating th…
• CVE-2023-50883TRUNG BÌNH 6.1ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and therefore a sandbox escape…
• CVE-2023-30187NGHIÊM TRỌNG 9.8An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code …