SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  Onlyoffice Document Server Path Traversal

Category: WEB-ATTACKS      

Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.


Relevant Information