CVE-2021-3199 — 脆弱性インテリジェンス

ONLYOFFICE — Docs

情報源の原文（翻訳ではありません）

ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.

情報源

• ONLYOFFICE Docs Server Path Traversal Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2021-3199