writeups.xyz / RCE via Path Traversal vulnerability in Onlyoffice CommunityServer < 12.5.2 (CVE-2023-34939)

Submitter : c2a

Date: 19 June 2023

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• RCE

Programs :

• OnlyOffice

Authors :

• Kirill Firsov (@K_firsov)

Link :
https://github.com/firsov/onlyoffice/blob/main/CVE-2023-34939-PoC.md