Reddit NetSec

CVE Database V5

AlienVault OTX General

Exploit-DB RSS Feed

Reddit InfoSec News

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ONLYOFFICE Docs (DocumentServer) in versions equal and below 8.3.1 are affected by a reflected cross-site scripting (XSS) issue when opening files via the WOPI protocol. Attackers could inject malicious scripts via crafted HTTP POST requests, which are then reflected in the server's HTML response.

CVE-2025-5301 is a reflected cross-site scripting (XSS) vulnerability affecting ONLYOFFICE Docs (DocumentServer) versions 8.3.1 and earlier. The vulnerability arises due to improper neutralization of input during web page generation, specifically when files are opened via the Web Application Open Platform Interface (WOPI) protocol. An attacker can craft malicious HTTP POST requests containing specially designed payloads that are reflected unsanitized in the HTML response generated by the server. This reflection enables the execution of arbitrary JavaScript code in the context of the victim's browser session. Since the vulnerability is reflected, it requires the victim to interact with a malicious link or file that triggers the crafted request. Exploitation could lead to session hijacking, credential theft, or unauthorized actions performed on behalf of the user within the ONLYOFFICE environment. The vulnerability does not require authentication to exploit, increasing its risk profile. Although no known exploits are currently reported in the wild, the presence of this vulnerability in a widely used document collaboration platform poses a significant risk, especially in environments where ONLYOFFICE Docs is exposed to untrusted networks or users. The lack of a patch at the time of publication further elevates the urgency for mitigation.

Detailed information about CVE-2025-5301: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in OnlyOffice Docs 

CVE-2025-5301: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in OnlyOffice Docs (DocumentServer) - Live Threat Intelligence - Threat Radar | OffSeq.com

Title	Severity	Type	Source	Date

Threats Tagged 'cve-2025-5301'

Filter Threats

Threats Tagged 'cve-2025-5301'