Onlyoffice: >> Document Server >> 4.0.2-4 Security Vulnerabilities
Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.
CVSS Score
9.8
EPSS Score
0.068
Published
2021-01-26
Page 2