Vulnerabilities

TI-2025-42392 CVE-2025-68936 · GHSA-v55r-6gfm-698m

Cross-site scripting in ONLYOFFICE Document Server

LOW 28

ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.002 Published 2025-12-25 Fixed in 9.2.1 CWE-79

TI-2025-42391 CVE-2025-68935 · GHSA-wxxw-j7jh-6gvh

Cross-site scripting in ONLYOFFICE Document Server

LOW 28

ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.002 Published 2025-12-25 Fixed in 9.2.1 CWE-79

TI-2023-25368 CVE-2023-46988 · GHSA-7vjf-fgr6-pcmc

Path Traversal vulnerability in ONLYOFFICE Document Server before v8.0.1 allows a remote…

MEDIUM 63

Path Traversal vulnerability in ONLYOFFICE Document Server before v8.0.1 allows a remote attacker to copy arbitrary files by manipulating the fileExt parameter in the /example/editor endpoint, leading to unauthorized acc…

CVSS 3.1MEDIUM 6.7 Local No auth No interaction EPSS 0.0053 Published 2025-04-01 No fix listed CWE-22

TI-2023-27787 CVE-2023-50883 · GHSA-rcqr-8g6q-fmc3

ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked…

MEDIUM 60

ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and therefore a sandbox escape is possible by directly calling the constructor of the Function object.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00608 Published 2024-09-09 No fix listed CWE-79

TI-2023-14163 CVE-2023-30188 · GHSA-xg67-jwrg-pjc6

Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows…

HIGH 72

Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a denial of service via crafted JavaScript file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02206 Published 2023-08-14 No fix listed CWE-835

TI-2023-14162 CVE-2023-30187 · GHSA-834c-mvqv-5x66

An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through…

HIGH 82

An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02363 Published 2023-08-14 No fix listed CWE-787

TI-2023-14161 CVE-2023-30186 · GHSA-m5p8-2r8q-qjjh

A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows…

HIGH 82

A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02316 Published 2023-08-14 No fix listed CWE-416

TI-2022-24007 CVE-2022-48422 · GHSA-j9xq-95fc-pqv2

ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain…

LOW 34

ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE docume…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.003 Published 2023-03-19 No fix listed CWE-427

TI-2022-12146 CVE-2022-29777 · GHSA-5q8q-7vqj-xx32

Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered…

MEDIUM 52

Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/fontconverter/FontFileBase.h.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07019 Published 2022-06-01 No fix listed CWE-787

TI-2022-12145 CVE-2022-29776 · GHSA-rhqr-qpwj-fp49

Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered…

MEDIUM 52

Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktopEditor/common/File.cpp.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07019 Published 2022-06-01 No fix listed CWE-787

TI-2022-08135 CVE-2022-24229 · GHSA-466m-m85x-cqj9

A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before…

LOW 31

A cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0 allows remote attackers inject arbitrary HTML or JavaScript through /example/editor.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01879 Published 2022-04-08 No fix listed CWE-79

TI-2021-07886 CVE-2021-25833 · GHSA-f4rq-cvc9-g327

A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer…

HIGH 71

A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.43534 Published 2021-03-01 No fix listed CWE-22

TI-2021-07885 CVE-2021-25832 · GHSA-mfqv-9gj9-6f5v

A heap buffer overflow vulnerability inside of BMP image processing was found at [core]…

MEDIUM 56

A heap buffer overflow vulnerability inside of BMP image processing was found at [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1259 Published 2021-03-01 No fix listed CWE-787

TI-2021-07884 CVE-2021-25831 · GHSA-m252-hx7q-7p3h

A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer…

MEDIUM 55

A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11503 Published 2021-03-01 No fix listed

TI-2021-07883 CVE-2021-25830 · GHSA-5mvf-vvh4-mj9c

A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer…

MEDIUM 56

A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11763 Published 2021-03-01 No fix listed

TI-2021-07882 CVE-2021-25829 · GHSA-jmxf-5qxj-85w9

An improper binary stream data handling issue was found in the [core] module of…

MEDIUM 43

An improper binary stream data handling issue was found in the [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07445 Published 2021-03-01 No fix listed

TI-2021-02273 CVE-2021-3199 · GHSA-vm8r-r39c-96c6

Path traversal in ONLYOFFICE Document Server enables code execution

CRITICAL 100KEV

Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /..

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30244 Published 2021-01-22 No fix listed CWE-22

TI-2020-09253 CVE-2020-11534 · GHSA-xf6p-w8xr-f966

An issue was discovered in ONLYOFFICE Document Server 5.5.0.

MEDIUM 46

An issue was discovered in ONLYOFFICE Document Server 5.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02236 Published 2020-04-15 No fix listed CWE-20

TI-2020-09254 CVE-2020-11535 · GHSA-2vgr-3xjr-x32c

An issue was discovered in ONLYOFFICE Document Server 5.5.0.

MEDIUM 47

An issue was discovered in ONLYOFFICE Document Server 5.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02318 Published 2020-04-15 No fix listed CWE-91

TI-2020-09255 CVE-2020-11536 · GHSA-55c5-m8rj-gx6v

An issue was discovered in ONLYOFFICE Document Server 5.5.0.

MEDIUM 47

An issue was discovered in ONLYOFFICE Document Server 5.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02586 Published 2020-04-15 No fix listed CWE-20

TI-2020-09256 CVE-2020-11537 · GHSA-pwx3-f4rv-4v5r

A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0.

MEDIUM 45

A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01486 Published 2020-04-15 No fix listed CWE-89

Vulnerabilities

Filters