Firetruck

CVE-2021-3199

KEV
Updated Oct 9, 2026 · PUBLISHED
View KEV entry →

Description

ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
n/an/a / n/an/aaffected