CVE-2023-30187
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk75th percentile - higher than 75% of all known CVEs
Summary
An out-of-bounds memory access vulnerability in ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2. A remote attacker can execute arbitrary code using a crafted JavaScript file.
Risk Assessment
Risk of full server compromise and potential exposure of sensitive documents processed by the ONLYOFFICE platform.
Recommendation
Immediately update ONLYOFFICE DocumentServer to version 7.3.3 or later, which includes a fix for this vulnerability.
Other vulnerabilities in ONLYOFFICE DocumentServer
See all- CVE-2023-30186Critical
A use-after-free vulnerability in ONLYOFFICE DocumentServer versions 4.0.3 through 7.3.2 allows remote attackers to execute arbitrary code via a crafted JavaScript file.
- CVE-2026-110652Medium
ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vulnerability in the /downloadfile/:docid endpoint. Attackers can bypass the private-IP request-filtering-agent by exploiting the isInJwtToken flag when JWT verification is disabled in the default configuration, causing the server to fetch and proxy back arbitrary private-network and cloud metadata content.
Original NVD description (English source)
An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS