CVE-2023-34939

9.8

CRITICALCVSS v3

Published

June 22, 2023

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

Onlyoffice Community Server before v12.5.2 was discovered to contain a remote code execution (RCE) vulnerability via the component UploadProgress.ashx.

ONLYOFFICE/CommunityServer

GitHubFree open source office suite with business productivity tools: document and project management, CRM, mail aggregator.

NVD

onlyoffice

Python Package IndexPython API for OnlyOffice.

< 12.5.2NVD

ONLYOFFICE

Chocolatey

More on this CVE

NVD↗GitHub Advisory↗

ONLYOFFICE is a project developed by experienced IT experts from Ascensio System SIA, leading IT company with headquarters in Riga, Latvia. Originally ONLYOFFICE was designed for internal team collaboration. An attempt to introduce it to a wider audience proved to be successful: ONLYOFFICE received very positive feedback from the Internet community. As a result, its functionality was considerably revised and expanded that brought about a high and stable growth of users from different countries. Free ONLYOFFICE Desktop Editors ![screenshot](https://cdn.rawgit.com/Akipe/chocolatey-packages/da4392e4/icons/onlyoffice/onlyoffice-screenshot.png)

< 12.5.2NVD

Security Advisories

CVE-2023-34939

Description

More on this CVE