CVE-2021-43449 - Vulnerability Details - OpenCVE

ReportizFlow

ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery (SSRF). The document editor service can be abused to read and serve arbitrary URLs as a document.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Onlyoffice	Server

Configuration 1 [-]

cpe:2.3:a:onlyoffice:server:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/ONLYOFFICE/server
https://labs.nettitude.com/blog/exploiting-onlyoffice-web-sockets-for-unauthenticated-remote-code-execution/
https://www.onlyoffice.com/

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-01-23T00:00:00

Updated: 2024-08-04T03:55:29.278Z

Reserved: 2021-11-08T00:00:00

Link: CVE-2021-43449

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-01-23T15:15:13.637

Modified: 2024-11-21T06:29:14.867

Link: CVE-2021-43449

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:onlyoffice:server:*:*:*:*:*:*:*:*", "matchCriteriaId": "F20D43B1-2433-412A-8D51-7D04C974D445", "versionEndIncluding": "7.0.0.49", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery (SSRF). The document editor service can be abused to read and serve arbitrary URLs as a document."}, {"lang": "es", "value": "Todas las versiones de ONLYOFFICE con fecha posterior al 08/11/2021 se ven afectadas por una vulnerabilidad Server-Side Request Forgery (SSRF). Se puede abusar del servicio de edici\u00f3n de documentos para leer y servir URL arbitrarias como documento."}], "id": "CVE-2021-43449", "lastModified": "2024-11-21T06:29:14.867", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "[email protected]", "type": "Primary"}]}, "published": "2023-01-23T15:15:13.637", "references": [{"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://github.com/ONLYOFFICE/server"}, {"source": "[email protected]", "tags": ["Exploit", "Mitigation", "Third Party Advisory"], "url": "https://labs.nettitude.com/blog/exploiting-onlyoffice-web-sockets-for-unauthenticated-remote-code-execution/"}, {"source": "[email protected]", "tags": ["Product", "Vendor Advisory"], "url": "https://www.onlyoffice.com/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/ONLYOFFICE/server"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Mitigation", "Third Party Advisory"], "url": "https://labs.nettitude.com/blog/exploiting-onlyoffice-web-sockets-for-unauthenticated-remote-code-execution/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product", "Vendor Advisory"], "url": "https://www.onlyoffice.com/"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "[email protected]", "type": "Primary"}]}