https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 21:53:27 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-17250 cnvd-2021-17250 https://cve.radiocsirt.org/vuln/cnvd-2021-17250 https://cve.radiocsirt.org/vuln/euvd-2026-24899 EUVD-2026-24899 https://cve.radiocsirt.org/vuln/euvd-2026-24899 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25833 <p>A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21. The file extension is controlled by an attacker through the request data and leads to arbitrary file overwriting. Using this vulnerability, a remote attacker can obtain remote code execution on DocumentServer.</p> <p>A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21. The file extension is controlled by an attacker through the request data and leads to arbitrary file overwriting. Using this vulnerability, a remote attacker can obtain remote code execution on DocumentServer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-25833 https://cve.radiocsirt.org/vuln/ghsa-f4rq-cvc9-g327 <p>A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21. The file extension is controlled by an attacker through the request data and leads to arbitrary file overwriting. Using this vulnerability, a remote attacker can obtain remote code execution on DocumentServer.</p> <p>UPDATE!</p> <p>A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21. The file extension is controlled by an attacker through the request data and leads to arbitrary file overwriting. Using this vulnerability, a remote attacker can obtain remote code execution on DocumentServer.</p> <p>UPDATE!</p> https://cve.radiocsirt.org/vuln/ghsa-f4rq-cvc9-g327 https://cve.radiocsirt.org/vuln/gsd-2021-25833 gsd-2021-25833 https://cve.radiocsirt.org/vuln/gsd-2021-25833