ONLYOFFICE Docs vulnerabilities
1 known vulnerability in ONLYOFFICE Docs from OnlyOffice. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
ONLYOFFICE Docs: Missing Authorization
The ONLYOFFICE Docs plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within its oo.callback REST endpoint in versions 1.1.0 to 2.2.0. The plugin’s permission callback only verifies that the supplied, encrypted attachment