Privilege Escalation Vulnerability in ONLYOFFICE Docs by ONLYOFFICE

CVE-2022-48422

What is CVE-2022-48422?

On certain Linux distributions, ONLYOFFICE Docs versions up to 7.3 are susceptible to a privilege escalation vulnerability. Local users can exploit a maliciously crafted libgcc_s.so.1 file located in the current working directory of ONLYOFFICE documents to gain elevated privileges, potentially compromising the entire system's security. This issue underscores the importance of monitoring directory contents and securing file permissions to mitigate local threat vectors.

References