CVE-2023-30186 in Document Server

الملخص

بحسب MITRE • 14/08/2023

A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 07/04/2023
• إفشاء: 14/08/2023
• الاعتدال: تمت الموافقة
• إدخال: VDB-237075
• CPE: جاهز
• CWE: CWE-416 (مؤكد)
• CVSS: 9.8 (NVD)
• EPSS: 0.01681
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-30186
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-30186
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-30186/