Files
CVEs-PoC/2020/CVE-2020-11534.md
T
2025-09-29 21:09:30 +02:00

757 B

CVE-2020-11534

Description

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the NSFileDownloader function to pass parameters to a binary (such as curl or wget) and remotely execute code on a victim's server.

POC

Reference

Github

No PoCs found on GitHub currently.