Published on: Not Yet Published
Last Modified on: 01/23/2023 05:17:00 PM UTC
The following vulnerability was found:
ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Improper Input Validation. A lack of input validation can allow an attacker to spoof the names of users who interact with a document, if the document id is known.
- CVE-2021-43448 has been assigned by [email protected] to track the vulnerability
|ONLYOFFICE - Online Office for business | ONLYOFFICE|| www.onlyoffice.com |
|Remote Code Execution in ONLYOFFICE - Nettitude Labs|| labs.nettitude.com |
|GitHub - ONLYOFFICE/server: The backend server software layer which is the part of ONLYOFFICE Document Server and is the base for all other components|| github.com |