Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-43448
5.3
MEDIUMCVSS v3
Published
January 23, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Improper Input Validation. A lack of input validation can allow an attacker to spoof the names of users who interact with a document, if the document id is known.
ONLYOFFICE/server
GitHubThe backend server software layer which is the part of ONLYOFFICE Document Server and is the base for all other components
GitHubThe backend server software layer which is the part of ONLYOFFICE Document Server and is the base for all other components<= 7.0.0.49NVD