Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-30187
9.8
CRITICALCVSS v3
Published
August 14, 2023
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.
ONLYOFFICE/DocumentServer
GitHubONLYOFFICE Docs is a free collaborative online office suite comprising viewers and editors for texts, spreadsheets and presentations, forms and PDF, fully compatible with Office Open XML formats: .docx, .xlsx, .pptx and enabling collaborative editing in real time.
GitHubONLYOFFICE Docs is a free collaborative online office suite comprising viewers and editors for texts, spreadsheets and presentations, forms and PDF, fully compatible with Office Open XML formats: .docx, .xlsx, .pptx and enabling collaborative editing in real time.>= 4.0.3, <= 7.3.2NVD