DO
Product
Docs
On CISA KEVExploited in the wild
3
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 2Low 0
Watch
Add Docs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3199 In wildKEV | 9.8 | Jan 22 | ONLYOFFICE Docs Server Path Traversal Vulnerability Affected: All versions, or not specified |
| CVE-2023-50883 | 6.1 | Sep 9 | ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and therefore a sandbox escape is possible by directly calling the… Affected: before 8.0.1 |
| CVE-2024-44085 | 6.1 | Sep 9 | ONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunction Object attack against a macro Affected: before 8.1.0 |
Showing 3