Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-43444
7.5
HIGHCVSS v3
Published
January 23, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. Signed document download URLs can be forged due to a weak default URL signing key.
ONLYOFFICE/server
GitHubThe backend server software layer which is the part of ONLYOFFICE Document Server and is the base for all other components
GitHubThe backend server software layer which is the part of ONLYOFFICE Document Server and is the base for all other components<= 7.0.0.49NVD