CVE-2022-48422: High severity onlyoffice vulnerability
ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgccs.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-48422?
CVE-2022-48422 is considered a high severity vulnerability due to its potential to allow local users to escalate privileges.
How do I fix CVE-2022-48422?
To fix CVE-2022-48422, ensure that users do not run ONLYOFFICE Docs in directories where a malicious libgcc_s.so.1 may be present.
Who is affected by CVE-2022-48422?
CVE-2022-48422 affects local users on certain Linux distributions using ONLYOFFICE Docs versions up to 7.3.
What versions of ONLYOFFICE Docs are vulnerable to CVE-2022-48422?
ONLYOFFICE Docs versions up to and including 7.3 are vulnerable to CVE-2022-48422.
Can CVE-2022-48422 be exploited remotely?
CVE-2022-48422 requires local access to the affected system, making it not exploitable remotely.