CVE-2022-47412

CVSS V2 None CVSS V3 None
Description
Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition.
Overview
  • CVE ID
  • CVE-2022-47412
  • Assigner
  • cve@rapid7.con
  • Vulnerability Status
  • Modified
  • Published Version
  • 2023-02-07T20:15:08
  • Last Modified Date
  • 2023-03-16T17:15:09
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:onlyoffice:workspace:*:*:*:*:*:*:*:* 1 OR 12.1.0.1760
History
Created Old Value New Value Data Type Notes
2023-04-17 07:20:52 Added to TrackCVE
2023-04-17 07:20:54 Weakness Enumeration new