← Database

CVE-2021-43448

MEDIUM CVSS: 5.3 Published: 2023-01-23 Modified: 2026-06-17

Description

ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Improper Input Validation. A lack of input validation can allow an attacker to spoof the names of users who interact with a document, if the document id is known.

Affected Platforms

Onlyoffice Server

Weakness Type

CWE-20, CWE-20

References