CVE-2023-30188

Published: Aug 14, 2023

Modified: Oct 9, 2024

PUBLISHED

Description

Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a denial of service via crafted JavaScript file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/ONLYOFFICE/DocumentServer

http://onlyoffice.com

https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/

https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/embed/NativeControlEmbed.cpp#L110

https://github.com/ONLYOFFICE/core/commit/2b6ad83b36afd9845085b536969d366d1d61150a

https://gist.github.com/merrychap/25eba8c4dd97c9e545edad1b8f0eadc2

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-30188

Description

Affected Products

References