PRODUCT PROFILE

onlyoffice

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2025-53012025/06/12

ONLYOFFICE Docs (DocumentServer) - Reflected Cross-Site Scripting

ONLYOFFICE Docs (DocumentServer) in versions equal and below 8.3.1 are affected by a reflected cross-site scripting (XSS) issue when opening files via the WOPI protocol. Attackers could inject malicious scripts via crafted HTTP POST requests, which are then reflected in the server's HTML response.

onlyofficePoC 已收录

CVSS6.1

高危2024/05/29

OnlyOffice Wizard Page - Exposure

Detects exposed OnlyOffice Setup page.

onlyofficePoC 已收录

CVSS—