Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-43446
6.1
MEDIUMCVSS v3
Published
January 23, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Cross Site Scripting (XSS). The "macros" feature of the document editor allows malicious cross site scripting payloads to be used.
ONLYOFFICE/server
GitHubThe backend server software layer which is the part of ONLYOFFICE Document Server and is the base for all other components
GitHubThe backend server software layer which is the part of ONLYOFFICE Document Server and is the base for all other components<= 7.0.0.49NVD