CVE-2021-25829

Name of the Vulnerable Software and Affected Versions ONLYOFFICE DocumentServer versions 4.0.0 through 5.6.3

Description An improper binary stream data handling issue was found in the [core] module. This issue allows an attacker to produce a denial of service attack that can eventually shut down the target server.

Recommendations For versions 4.0.0 through 5.6.3, consider temporarily disabling the [core] module to prevent exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.