CVE-2023-25266
An issue was discovered in Docmosis Tornado prior to version 2.9.5. An authenticated attacker can change the Office directory setting pointing to an arbitrary remote network pat…
Published: 2023-02-28 · CVSS: 8.8 · CVSS 3.1
An issue was discovered in Docmosis Tornado prior to version 2.9.5. An authenticated attacker can change the Office directory setting pointing to an arbitrary remote network path. This triggers the execution of the soffice binary under the attackers control leading to arbitrary remote code execution (RCE).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7