5.2.7

DATE	CVE	VULNERABILITY TITLE	RISK
2021-03-01	CVE-2021-25831	Unspecified vulnerability in Onlyoffice Document Server A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. network low complexity onlyoffice critical	9.8
2021-03-01	CVE-2021-25830	Unspecified vulnerability in Onlyoffice Document Server A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. network low complexity onlyoffice critical	9.8
2021-03-01	CVE-2021-25829	Unspecified vulnerability in Onlyoffice Document Server An improper binary stream data handling issue was found in the [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. network low complexity onlyoffice	7.5
2021-01-26	CVE-2021-3199	Path Traversal vulnerability in Onlyoffice Document Server Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. network low complexity onlyoffice CWE-22 critical	9.8