{"total":1,"items":[{"id":990,"title":"CVE-2021-3199: ONLYOFFICE Docs Server Path Traversal Vulnerability","original_title":"CVE-2021-3199: ONLYOFFICE Docs Server Path Traversal Vulnerability","source_rating":null,"summary":"ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security U","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3199","type":"kev","language":"en","published_at":"2026-10-08T00:00:00+00:00","severity":"hoog","priority":55,"vendors":["ONLYOFFICE"],"cves":[{"id":"CVE-2021-3199","cvss":9.8,"epss":0.08215,"epss_percentile":0.9475,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":0.08215,"source_count":1,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null}]}