Description
An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the unzip function to rewrite a binary and remotely execute code on a victim's server.
Unscored
CVE-2020-11536
EUVD-2020-3888GHSA-55c5-m8rj-gx6v
An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the unzip function t…
Published Apr 15, 2020 · Updated Aug 4, 2024 · Assigned by mitre