Published on: Not Yet Published
Last Modified on: 08/08/2023 02:21:00 PM UTC
ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An authentication bypass in the document editor allows attackers to edit documents without authentication.
- CVE-2021-43447 has been assigned by [email protected] to track the vulnerability - currently rated as HIGH severity.
CVSS3 Score: 7.5 - HIGH
|ONLYOFFICE - Online Office for business | ONLYOFFICE|| www.onlyoffice.com |
|Remote Code Execution in ONLYOFFICE - Nettitude Labs|| labs.nettitude.com |
|GitHub - ONLYOFFICE/server: The backend server software layer which is the part of ONLYOFFICE Document Server and is the base for all other components|| github.com |
Exploit/POC from Github
ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An authentication bypass in the doc…
Known Affected Configurations (CPE V2.3)