CVE-2022-48422 - ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located

Back Back to CVE browser

HIGH

ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located

Published Mar 19, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.30%

Description

ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (1)

https://forum.onlyoffice.com/t/security-hole-library-from-cwd/3302
ExploitIssue TrackingThird Party Advisory

Link	Providers	Tags
https://forum.onlyoffice.com/t/security-hole-library-from-cwd/3302		ExploitIssue TrackingThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 19, 2023

Updated Feb 27, 2025

Reserved Mar 19, 2023

Link CVE-2022-48422

CISA Vulnrichment

Updated Feb 27, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-48422

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-48422