GHSA-4g2j-34p9-p684CriticalCVSS 9.8
When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to...
🔗 CVE IDs covered (1)
📋 Description
When OnlyOffice/Document Editing is available, an unauthenticated remote attacker with access to an existing supported public Briefcase document can abuse unsigned save fields to perform path-traversal writes and execute commands as zimbra.