CVE-2023-30186
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk74th percentile - higher than 74% of all known CVEs
Summary
A use-after-free vulnerability in ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2 allows remote attackers to execute arbitrary code via a crafted JavaScript file.
Risk Assessment
An attacker can remotely take control of the document server, compromising the confidentiality, integrity, and availability of organizational data.
Recommendation
Immediately update ONLYOFFICE DocumentServer to version 7.3.3 or later, which includes a fix for this vulnerability.
Other vulnerabilities in ONLYOFFICE DocumentServer
See all- CVE-2023-30187Critical
An out-of-bounds memory access vulnerability in ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2. A remote attacker can execute arbitrary code using a crafted JavaScript file.
- CVE-2026-110652Medium
ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vulnerability in the /downloadfile/:docid endpoint. Attackers can bypass the private-IP request-filtering-agent by exploiting the isInJwtToken flag when JWT verification is disabled in the default configuration, causing the server to fetch and proxy back arbitrary private-network and cloud metadata content.
Original NVD description (English source)
A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS