ONLYOFFICE 1

CVE-2021-3199: ONLYOFFICE Docs Server Path Traversal Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Oct 08, 2026

ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.

Vulnerabilities & Patching