CVE-2023-30186

Опубликовано: 14 авг. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.

Ссылки

http://onlyoffice.com
Product
https://gist.github.com/merrychap/25eba8c4dd97c9e545edad1b8f0eadc2
Exploit
Patch
Third Party Advisory
https://github.com/ONLYOFFICE/DocumentServer
Product
https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/
Product
https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/embed/NativeControlEmbed.cpp#L110
Not Applicable
https://github.com/ONLYOFFICE/core/commit/2b6ad83b36afd9845085b536969d366d1d61150a
Patch
Vendor Advisory
http://onlyoffice.com
Product
https://gist.github.com/merrychap/25eba8c4dd97c9e545edad1b8f0eadc2
Exploit
Patch
Third Party Advisory
https://github.com/ONLYOFFICE/DocumentServer
Product
https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/
Product
https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/embed/NativeControlEmbed.cpp#L110
Not Applicable
https://github.com/ONLYOFFICE/core/commit/2b6ad83b36afd9845085b536969d366d1d61150a
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:onlyoffice:document_server:*:*:*:*:*:*:*:*

Версия от 4.0.3 (включая) до 7.3.2 (включая)

EPSS

Процентиль: 76%

0.00934

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

GHSA-m5p8-2r8q-qjjh

CVSS3: 7.8

github

больше 2 лет назад