CVE-2022-29776

Vulnerable Component Details
Type Namespace Name Version Package URL
npm @ngx-prism core 2.0.1 pkg:npm/%40ngx-prism/core@2.0.1?package-id=3d7750411bcf4fdf
Vulnerability Details
ID CVE-2022-29776
Description Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktopEditor/common/File.cpp.
Ratings
Severity Score Method Vector Source
None None
9.8 CVSSv2 AV:N/AC:L/Au:N/C:P/I:P/A:P
9.8 CVSSv31 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Found By Anchore Grype
References / Advisories