| Package | Affected versions | Patched versions |
|---|---|---|
| document server | ≥ 4.0.3, ≤ 7.3.2 |
A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free