CVE-2023-30187

Published: Aug 14, 2023

Modified: Oct 9, 2024

PUBLISHED

Description

An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/ONLYOFFICE/DocumentServer

http://onlyoffice.com

https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/

https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/embed/NativeControlEmbed.cpp#L110

https://github.com/ONLYOFFICE/core/commit/2b6ad83b36afd9845085b536969d366d1d61150a

https://gist.github.com/merrychap/25eba8c4dd97c9e545edad1b8f0eadc2

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-30187

Description

Affected Products

References