Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-43447
7.5
HIGHCVSS v3
Published
January 23, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An authentication bypass in the document editor allows attackers to edit documents without authentication.
ONLYOFFICE/server
GitHubThe backend server software layer which is the part of ONLYOFFICE Document Server and is the base for all other components
GitHubThe backend server software layer which is the part of ONLYOFFICE Document Server and is the base for all other components<= 7.0.0.49NVD