CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-30186
https://notcve.org/view.php?id=CVE-2023-30186
A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file. • http://onlyoffice.com https://gist.github.com/merrychap/25eba8c4dd97c9e545edad1b8f0eadc2 https://github.com/ONLYOFFICE/DocumentServer https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/embed/NativeControlEmbed.cpp#L110 https://github.com/ONLYOFFICE/core/commit/2b6ad83b36afd9845085b536969d366d1d61150a • CWE-416: Use After Free •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-30187
https://notcve.org/view.php?id=CVE-2023-30187
An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file. • http://onlyoffice.com https://gist.github.com/merrychap/25eba8c4dd97c9e545edad1b8f0eadc2 https://github.com/ONLYOFFICE/DocumentServer https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/embed/NativeControlEmbed.cpp#L110 https://github.com/ONLYOFFICE/core/commit/2b6ad83b36afd9845085b536969d366d1d61150a • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-30188
https://notcve.org/view.php?id=CVE-2023-30188
Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a denial of service via crafted JavaScript file. • http://onlyoffice.com https://gist.github.com/merrychap/25eba8c4dd97c9e545edad1b8f0eadc2 https://github.com/ONLYOFFICE/DocumentServer https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/embed/NativeControlEmbed.cpp#L110 https://github.com/ONLYOFFICE/core/commit/2b6ad83b36afd9845085b536969d366d1d61150a • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 2CVE-2023-34939
https://notcve.org/view.php?id=CVE-2023-34939
Onlyoffice Community Server before v12.5.2 was discovered to contain a remote code execution (RCE) vulnerability via the component UploadProgress.ashx. • https://github.com/ONLYOFFICE/CommunityServer/blob/master/CHANGELOG.md#version-1252 https://github.com/firsov/onlyoffice https://github.com/firsov/onlyoffice/blob/main/CVE-2023-34939-PoC.md • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1CVE-2022-48422
https://notcve.org/view.php?id=CVE-2022-48422
ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located. • https://forum.onlyoffice.com/t/security-hole-library-from-cwd/3302 • CWE-427: Uncontrolled Search Path Element •