Onlyoffice Owncloud Integration Plugin
Monthly
Server-Side Request Forgery in ONLYOFFICE ownCloud Integration Plugin version 9.12 enables an authenticated administrator to redirect outbound HTTP requests from the ownCloud server to arbitrary internal destinations by supplying a malicious Document Server URL to the `/apps/onlyoffice/ajax/settings/address` endpoint. Successful exploitation allows internal network reconnaissance and TCP port scanning through differential server response timing and content. No public exploit code has been identified at time of analysis, and EPSS sits at 0.16% (6th percentile), reflecting low observed exploitation interest despite the high confidentiality impact rating.
Server-Side Request Forgery in ONLYOFFICE ownCloud Integration Plugin version 9.12 enables an authenticated administrator to redirect outbound HTTP requests from the ownCloud server to arbitrary internal destinations by supplying a malicious Document Server URL to the `/apps/onlyoffice/ajax/settings/address` endpoint. Successful exploitation allows internal network reconnaissance and TCP port scanning through differential server response timing and content. No public exploit code has been identified at time of analysis, and EPSS sits at 0.16% (6th percentile), reflecting low observed exploitation interest despite the high confidentiality impact rating.