References https://github.com/firsov/onlyoffice/blob/main/CVE-2023-34939-PoC.md https://nvd.nist.gov/vuln/detail/CVE-2023-34939 https://www.tenable.com/cve/CVE-2023-34939 https://avd.aliyun.com/detail?id=AVD-2023-34939 https://cn-sec.com/archives/3198268.html https://github.com/advisories/GHSA-8rx2-c38v-6hm8 https://stack.chaitin.com/vuldb/detail/6f31cdb7-eed0-4306-a2af-79bd87b0f0a7 https://zhuanlan.zhihu.com/p/647001381 https://cn-sec.com/archives/1928287.html https://vulmon.com/vulnerabilitydetails?qid=CVE-2023-34939 https://dbugs.ptsecurity.com/vulnerability/PT-2023-4141 https://service.securitm.ru/vm/vulnerability/fstec/show/BDU:2023-04451 https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=34223 https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2023-34939 https://access.redhat.com/security/cve/cve-2023-34939 https://www.cve.org/CVERecord?id=CVE-2023-34939 https://community.onlyoffice.com/t/desktop-editors-security-update/9851 https://www.ctfiot.com/123311.html http://www.gzwangan.com/?p=3236
Related VulnerabilitiesPoCCVE-2025-5301: ONLYOFFICE Docs (DocumentServer) - Reflected Cross-Site ScriptingPoConlyoffice-installer: OnlyOffice Wizard Page - ExposureONLYOFFICE edit接口 任意文件读取漏洞水务通onlyOffice任意文件读取OnlyOffice CommunityServer /savefile/1 文件写入漏洞Ascensio System ONLYOFFICE 资源管理错误漏洞OnlyOffice CommunityServer UploadProgress.ashx 文件上传漏洞ONLYOFFICE 跨站脚本漏洞Ascensio System ONLYOFFICE 跨站脚本漏洞Ascensio System ONLYOFFICE Document Server 跨站脚本漏洞ONLYOFFICE Document Server 远程代码执行漏洞ONLYOFFICE Document Server 路径遍历漏洞