CVE-2021-3199
CVSS–Ni ocene
EPSS (30 dni)19,4 %
CISA KEVDaod 8. 10. 2026
Rok za popravek (CISA)11. 10. 2026
Proizvajalec: ni podatka
Uporaba v izsiljevalskih napadih: Ni podatka
Opis (NVD, angleško): ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.