CVE-2021-3199
CRITICAL CISACVSS Score
N/A
Severity
CRITICAL
Source
CISA
Published
Oct 08, 2026
Description
ONLYOFFICE โ Docs: ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.