EXPOSURES › CVE-2023-30186

CVE-2023-30186

CRITICAL

DETAIL

SourceNVD · cve Published2023-08-14 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-30186 ↗

⚡ RCE SHAME 50/100 rce

A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.

▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED

onlyoffice · vendor document server · product

DESCRIPTION

A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.