Description
ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery (SSRF). The document editor service can be abused to read and serve arbitrary URLs as a document.
High · 8.1
CVE-2021-43449
EUVD-2021-30382GHSA-pw64-6v6v-94vp
ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery (SSRF). The document editor service can be abused to …
Published Jan 23, 2023 · Updated Apr 2, 2025 · Assigned by mitre