CVE-2021-3199: ONLYOFFICE Docs Server Path Traversal Vulnerability
Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.
Other sources
ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ONLYOFFICE Docs Serverto a version that resolves this vulnerability.Fixed in 5.6.3
Event History
Frequently Asked Questions
What is the severity of CVE-2021-3199?
CVE-2021-3199 is categorized as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2021-3199?
To fix CVE-2021-3199, upgrade ONLYOFFICE Document Server to version 5.6.3 or later.
What type of attack does CVE-2021-3199 involve?
CVE-2021-3199 involves a directory traversal attack allowing remote code execution.
Which component of ONLYOFFICE is affected by CVE-2021-3199?
CVE-2021-3199 affects the upload functionality in ONLYOFFICE Document Server.
Is CVE-2021-3199 exploitable without authentication?
Yes, CVE-2021-3199 can be exploited by unauthenticated users due to improper input validation.