CVE-2025-6380criticalCWE-862

CVE-2025-6380: falha crítica em ONLYOFFICE Docs

ONLYOFFICE Docs 1.1.0 - 2.2.0 - Missing Authorization to Unauthenticated Privilege Escalation via callback Function

Publicada em

Seguir esta CVE+ Monitorar ONLYOFFICE Docs

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.9%
The ONLYOFFICE Docs plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within its oo.callback REST endpoint in versions 1.1.0 to 2.2.0. The plugin’s permission callback only verifies that the supplied, encrypted attachment ID maps to an existing attachment post, but does not verify the requester’s identity or capabilities. This makes it possible for unauthenticated attackers to log in as an arbitrary user.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
onlyoffice · ONLYOFFICE Docs
CVEs relacionadas — ONLYOFFICE Docs

No mesmo produto, das mais perigosas para as menos.

CVE-2024-11450MEDIUMONLYOFFICE Docs <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%