Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-24229
6.1
MEDIUMCVSS v3
Published
April 8, 2022
CVSS v2
4.3 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor.
ONLYOFFICE/DocumentServer
GitHubONLYOFFICE Docs is a free collaborative online office suite comprising viewers and editors for texts, spreadsheets and presentations, forms and PDF, fully compatible with Office Open XML formats: .docx, .xlsx, .pptx and enabling collaborative editing in real time.
GitHubONLYOFFICE Docs is a free collaborative online office suite comprising viewers and editors for texts, spreadsheets and presentations, forms and PDF, fully compatible with Office Open XML formats: .docx, .xlsx, .pptx and enabling collaborative editing in real time.< 7.0.0NVD
ONLYOFFICE/document-server-integrationGitHubExamples on how to integrate ONLYOFFICE Document Server into your own website or application
GitHubExamples on how to integrate ONLYOFFICE Document Server into your own website or applicationNVD