CVE-2021-3199

Critical9.8 Published on Jan 26, 2021

Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-22, CWE-22

Vendorsonlyoffice

Affected products

Vendors	Product	Versions
onlyoffice	document server	< 5.6.3

APT

FBI Seizes Seven Domains Supporting Flax Typhoon Scanning and Malware Operations

FBI seized domains allegedly supporting MicroScan and FishHub scanning and malware platforms attributed to China-linked Flax Typhoon operators.

Oct 8, 202623:05 6 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

CVE-2021-3199

Affected products

Related articles

FBI Seizes Seven Domains Supporting Flax Typhoon Scanning and Malware Operations

Audience measurement