Vulnérabilité

CVE-2021-3199 activement exploitée : ONLYOFFICE Docs Server Path Traversal

CISA KEV · 8 octobre 2026 à 20 h 00 · Gravité critique

ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.