← Back

CVE-2024-47222

nvd nist
Published: Sep 23, 2024Modified: Mar 18, 2025

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

New Cloud MyOffice SDK Collaborative Editing Server 2.2.2 through 2.8 allows SSRF via manipulation of requests from external document storage via the MS-WOPI protocol.

Affected (1)

Myoffice
1 product
My Office Sdk
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
My Office Sdk
From 2.2.2 to 2.8.0

Related CWEs

CWE-918
Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (2)

Source: cve@mitre.org
Product
Source: cve@mitre.org
Product

Timeline

No history available yet.