CVE-2019-1447

Name of the Vulnerable Software and Affected Versions Office Online (affected versions not specified) Office Online Server (affected versions not specified)

Description A spoofing issue exists due to incorrect validation of origin in cross-origin communications handlers. This can be exploited by a remote attacker using a specially crafted request, potentially allowing spoofing attacks. The issue is related to errors in the representation of information by the user interface.

Recommendations For Office Online, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Office Online Server, at the moment, there is no information about a newer version that contains a fix for this vulnerability.