ZeroHour

CVE-2021-40864

CVSS 3.1
9.8 critical
EPSS
2%p82
Published
()
Modified
Description

The Translate plugin 6.1.x through 6.3.x before 6.3.0.72 for ONLYOFFICE Document Server lacks escape calls for the msg.data and text fields.

Vendors
onlyoffice
Products
google translate
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.