Security
Loading…

CVE-2021-3199

UNKNOWNKnown Exploited
Description

ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.

Timeline
Published:October 8th, 2026 12:00 AM
Last modified:October 8th, 2026 12:00 AM
Added to KEV:October 8th, 2026
CVSS Scoring

No CVSS v3 score available

Affected Software
From NVD CPE configuration data

Vendors

ONLYOFFICE

Products

Docs
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute