RESEARCH / DOCUMENTMarkdown原文 ↗

NVD公開月 2021-01

1 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ(全件生成も可能)。

CVE 状態 KEV CWE 概要(先頭180文字)
CVE-2021-3199 Analyzed 掲載 CWE-22 Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.