CVE-2023-30187
Out-of-bounds write in Onlyoffice Document Server
CVSS score
9.8
EPSS probability
%2.4
Risk score
0.2
Published
3 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2021-3199 Actively exploited
Path traversal in N/a
N
WorkaroundEPSS %19
6.3
CVE-2026-110652
ONLYOFFICE DocumentServer before 10.0.0 SSRF via downloadfile isInJwtToken Bypass
O
Patch verified
9.8
CVE-2023-30186
Use after free in Onlyoffice Document Server
O
Patch verifiedEPSS %2
7.5
CVE-2023-30188
Vulnerability in Onlyoffice Document Server
O
Patch verifiedEPSS %2
8.7
CVE-2026-110385
Vulnerability in ONLYOFFICE Document Server
O
Patch status unknownEPSS %1
6.1
CVE-2025-68936
Cross-site scripting in Onlyoffice Document Server
O
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-30187"