Published on: Not Yet Published
Last Modified on: 01/23/2023 05:17:00 PM UTC
The following vulnerability was found:
ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Cross Site Scripting (XSS). The "macros" feature of the document editor allows malicious cross site scripting payloads to be used.
- CVE-2021-43446 has been assigned by [email protected] to track the vulnerability
|ONLYOFFICE - Online Office for business | ONLYOFFICE|| onlyoffice.com |
|Remote Code Execution in ONLYOFFICE - Nettitude Labs|| labs.nettitude.com |
|GitHub - ONLYOFFICE/server: The backend server software layer which is the part of ONLYOFFICE Document Server and is the base for all other components|| github.com |