CVE-2021-3199
ONLYOFFICE Docs Server Path Traversal Vulnerability
- Severity: Critical
- CVSS 9.8
- EPSS 20.14%
- On CISA KEV
- P1 · Patch now
Why P1: on CISA KEV.
Description
ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.
CISA Known Exploited Vulnerability
Added 2026-10-08, remediation due 2026-10-11. Ransomware use: Unknown. Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for…
Affected products
- ONLYOFFICE Docs Version details not specified by CISA
References
- CISA KEV catalog CISA