Docs
Onlyoffice · 2 CVEs
CVE-2024-44085
MEDIUM
ONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunction Object attack against a macro. This is related to use o…
Sep 9, 2024
CVE-2023-50883
MEDIUM
ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and there…
Sep 9, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-44085 | ONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunction Object attack against a macro. This is related to use of an immediately-invoked function expres… | MEDIUM | 0.53% | Sep 9, 2024 |
| CVE-2023-50883 | ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and therefore a sandbox escape is possible by dir… | MEDIUM | 0.61% | Sep 9, 2024 |
Showing 1 to 2 of 2 CVEs