PT-2023-4392 · Onlyoffice · Onlyoffice Document Server

K0R0L · Published 2023-08-14 · Updated 2023-08-21 · CVE-2023-30188

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ONLYOFFICE Document Server versions 4.0.3 through 7.3.2

Description The issue is related to a Memory Exhaustion vulnerability in the JavaScript File Handler component of ONLYOFFICE Document Server. This vulnerability allows remote attackers to cause a denial of service via a crafted JavaScript file. The exploitation of this vulnerability is associated with incorrect cleanup or release of resources.

Recommendations For versions 4.0.3 through 7.3.2, consider disabling the JavaScript File Handler component as a temporary workaround to minimize the risk of exploitation until a patch is available. Restrict access to crafted JavaScript files to prevent remote attackers from causing a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Infinite Loop

Improper Resource Release

Weakness Enumeration

CWE-835

CWE-404

Related Identifiers

BDU:2023-04737

CVE-2023-30188

Affected Products

Onlyoffice Document Server

References · 13

• 🔥 https://gist.github.com/merrychap/25eba8c4dd97c9e545edad1b8f0eadc2 · Exploit
• https://github.com/ONLYOFFICE/core/commit/2b6ad83b36afd9845085b536969d366d1d61150a · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30188 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30188 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-04737 · Security Note
• https://github.com/ONLYOFFICE/DocumentServer · Note
• https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer/embed/NativeControlEmbed.cpp#L110 · Note
• https://twitter.com/CVEnew/status/1691064019132571649 · Twitter Post
• https://github.com/ONLYOFFICE/core/blob/8ca40a44ce47a86168327a46db91253cf6bb205d/DesktopEditor/doctrenderer · Note
• https://twitter.com/VulmonFeeds/status/1691098161517936640 · Twitter Post
• https://t.me/cibsecurity/68433 · Telegram Post
• https://t.me/cvenotify/56831 · Telegram Post
• http://onlyoffice.com · Note