Skip to content
OpenAdvisories

Product · dromara

skyeye

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-107781

    Dromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileById

    Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callback editUploadOfficeFileById. Unauthenticated attackers can supply arbitrary url …

    dromara skyeye