OnlyOffice — Vulnerabilities & Security Advisories 8

ONLYOFFICE is a collaborative platform offering document editing, management, and office suite functionality. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation and access control flaws. The platform has faced security concerns, with eight CVEs recorded to date, highlighting risks in areas like API endpoints and document processing. While providing comprehensive collaboration tools, security researchers have identified potential weaknesses in authentication mechanisms and file handling. Organizations implementing ONLYOFFICE should prioritize regular updates and security hardening to mitigate these risks, as the platform's broad functionality increases its attack surface.