Beveiligingsadvies

CVE-2025-5301

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-12 07:59:05

Laatst bijgewerkt 2025-06-18 04:08:26

Toegewezen door SEC-VLab

CVSS-score 6.1

Status PUBLISHED

Beschrijving

ONLYOFFICE Docs (DocumentServer) in versions equal and below 8.3.1 are affected by a reflected cross-site scripting (XSS) issue when opening files via the WOPI protocol. Attackers could inject malicious scripts via crafted HTTP POST requests, which are then reflected in the server's HTML response.

← Alle CVE's bekijken Bekijk op cve.org ↗