Security Advisory
CVE-2020-11537
9.8
CRITICAL
Vulnerability Description
A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can execute arbitrary SQL queries via injection to DocID parameter of Websocket API.
Published Date
April 15, 2020
Official Source
NIST NVD Advisory