{"id":"CVE-2021-3199","url":"https://compromised.live/t/CVE-2021-3199","kind":"exploited_vuln","tier":2,"severity":"high","title":"ONLYOFFICE Docs: ONLYOFFICE Docs Server Path Traversal Vulnerability","summary":"Attackers are actively exploiting a path traversal flaw, using a /.. sequence in an image upload parameter when JWT is enabled, which can lead to remote code execution on the server. ONLYOFFICE Docs Server, installations that use JWT. Apply the vendor's update now and check for signs of compromise.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-10-08","due_date":"2026-10-11","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.","aliases":["CVE-2021-3199"],"sources":[{"name":"kev","id":"CVE-2021-3199","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3199"}]}