CVE-2021-40864

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-40864
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-40864.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-40864
Published
2021-09-10T19:15:08Z
Modified
2026-10-20T10:54:57Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The Translate plugin 6.1.x through 6.3.x before 6.3.0.72 for ONLYOFFICE Document Server lacks escape calls for the msg.data and text fields.

References

Affected packages

Git / github.com/onlyoffice/plugin-translator

Affected ranges

Type
GIT
Repo
https://github.com/onlyoffice/plugin-translator
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
409b7ccd04b35797c3f085755044c9fd193e93cf
Fixed
2206c0179cb97e3b8b290a0ab5719b1f0f54542b
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:onlyoffice:google_translate:*:*:*:*:*:document_server:*:*",
            "range":  [
                {
                    "introduced":  "6.1.0"
                },
                {
                    "fixed":  "6.3.0.72"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "range":  [
                {
                    "fixed":  "2206c0179cb97e3b8b290a0ab5719b1f0f54542b"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

v5.*
v5.5.4.6
v5.5.4.7
v5.5.4.8
v5.5.99.1937
v5.5.99.1939
v5.5.99.1955
v5.5.99.1956
v5.5.99.1962
v5.5.99.1964
v5.5.99.1965
v5.5.99.1966
v5.5.99.1968
v5.5.99.1969
v5.5.99.1970
v5.5.99.1971
v5.5.99.1972
v5.5.99.1973
v5.5.99.1974
v5.5.99.1975
v5.5.99.1976
v5.5.99.1977
v5.5.99.1978
v5.5.99.1979
v5.5.99.1980
v5.5.99.1981
v5.5.99.1982
v5.5.99.1983
v5.5.99.1984
v5.5.99.1986
v5.5.99.1987
v5.5.99.1988
v5.5.99.1990
v5.5.99.1991
v5.5.99.1992
v5.5.99.1995
v5.5.99.1996
v5.5.99.1997
v5.5.99.1998
v5.5.99.1999
v5.5.99.2000
v5.5.99.2001
v5.5.99.2002
v5.5.99.2003
v5.5.99.2004
v5.5.99.2005
v5.5.99.2006
v5.5.99.2007
v5.5.99.2008
v5.5.99.2009
v5.5.99.2010
v5.5.99.2011
v5.5.99.2012
v5.5.99.2013
v5.5.99.2014
v5.5.99.2015
v5.5.99.2023
v5.5.99.2024
v6.*
v6.0.0.1
v6.0.0.2
v6.0.0.3
v6.0.0.4
v6.0.0.5
v6.0.0.6
v6.0.0.7
v6.0.0.8
v6.0.0.9
v6.0.99.2025
v6.0.99.2026
v6.0.99.2027
v6.0.99.2029
v6.0.99.2030
v6.0.99.2031
v6.1.0.1
v6.1.0.10
v6.1.0.12
v6.1.0.13
v6.1.0.19
v6.1.0.2
v6.1.0.20
v6.1.0.21
v6.1.0.22
v6.1.0.23
v6.1.0.25
v6.1.0.26
v6.1.0.27
v6.1.0.28
v6.1.0.29
v6.1.0.3
v6.1.0.30
v6.1.0.31
v6.1.0.32
v6.1.0.33
v6.1.0.4
v6.1.0.5
v6.1.0.6
v6.1.0.9
v6.2.0.1
v6.2.0.10
v6.2.0.7
v6.2.0.8
v6.2.0.9
v6.3.0.10
v6.3.0.11
v6.3.0.12
v6.3.0.13
v6.3.0.14
v6.3.0.15
v6.3.0.16
v6.3.0.18
v6.3.0.19
v6.3.0.20
v6.3.0.21
v6.3.0.22
v6.3.0.23
v6.3.0.24
v6.3.0.25
v6.3.0.26
v6.3.0.27
v6.3.0.33
v6.3.0.34
v6.3.0.35
v6.3.0.36
v6.3.0.37
v6.3.0.39
v6.3.0.4
v6.3.0.40
v6.3.0.41
v6.3.0.43
v6.3.0.45
v6.3.0.46
v6.3.0.47
v6.3.0.48
v6.3.0.49
v6.3.0.5
v6.3.0.50
v6.3.0.51
v6.3.0.52
v6.3.0.53
v6.3.0.54
v6.3.0.55
v6.3.0.56
v6.3.0.57
v6.3.0.58
v6.3.0.6
v6.3.0.61
v6.3.0.62
v6.3.0.63
v6.3.0.64
v6.3.0.65
v6.3.0.66
v6.3.0.67
v6.3.0.68
v6.3.0.69
v6.3.0.7
v6.3.0.70
v6.3.0.71
v6.3.0.8
v6.3.0.9
v99.*
v99.99.99.2032
v99.99.99.2033
v99.99.99.2034
v99.99.99.2035
v99.99.99.2036
v99.99.99.2037
v99.99.99.2038
v99.99.99.2039
v99.99.99.2040
v99.99.99.2041
v99.99.99.2042
v99.99.99.2043
v99.99.99.2047
v99.99.99.2048
v99.99.99.2049
v99.99.99.2050
v99.99.99.2051
v99.99.99.2052
v99.99.99.2053
v99.99.99.2054
v99.99.99.2055
v99.99.99.2056
v99.99.99.2057
v99.99.99.2058
v99.99.99.2059
v99.99.99.2060
v99.99.99.2061
v99.99.99.2062
v99.99.99.2063
v99.99.99.2064
v99.99.99.2065
v99.99.99.2066
v99.99.99.2067
v99.99.99.2068
v99.99.99.2069
v99.99.99.2070
v99.99.99.2071
v99.99.99.2072
v99.99.99.2073
v99.99.99.2074
v99.99.99.2075
v99.99.99.2076
v99.99.99.2077
v99.99.99.2078
v99.99.99.2079
v99.99.99.2080
v99.99.99.2081
v99.99.99.2082
v99.99.99.2084
v99.99.99.2088
v99.99.99.2089
v99.99.99.2090
v99.99.99.2091
v99.99.99.2094
v99.99.99.2095
v99.99.99.2096
v99.99.99.2098
v99.99.99.2099
v99.99.99.2100
v99.99.99.2101
v99.99.99.2102
v99.99.99.2108
v99.99.99.2110
v99.99.99.2113
v99.99.99.2114
v99.99.99.2115
v99.99.99.2116
v99.99.99.2117
v99.99.99.2118
v99.99.99.2119
v99.99.99.2120
v99.99.99.2121
v99.99.99.2122
v99.99.99.2123
v99.99.99.2124
v99.99.99.2125
v99.99.99.2128
v99.99.99.2144
v99.99.99.2146
v99.99.99.2148
v99.99.99.2149
v99.99.99.2150
v99.99.99.2164
v99.99.99.2165
v99.99.99.2167
v99.99.99.2168
v99.99.99.2169
v99.99.99.2170
v99.99.99.2172
v99.99.99.2173
v99.99.99.2189
v99.99.99.2190
v99.99.99.2192
v99.99.99.2193
v99.99.99.2194
v99.99.99.2195
v99.99.99.2196
v99.99.99.2208
v99.99.99.2209
v99.99.99.2210
v99.99.99.2215
v99.99.99.2216
v99.99.99.2217
v99.99.99.2218
v99.99.99.2221
v99.99.99.2240
v99.99.99.2241
v99.99.99.2242
v99.99.99.2246
v99.99.99.2247
v99.99.99.2248
v99.99.99.2249
v99.99.99.2255
v99.99.99.2259
v99.99.99.2263
v99.99.99.2264
v99.99.99.2267
v99.99.99.2268
v99.99.99.2269
v99.99.99.2270
v99.99.99.2271
v99.99.99.2272
v99.99.99.2273
v99.99.99.2285
v99.99.99.2286
v99.99.99.2290
v99.99.99.2298
v99.99.99.2299
v99.99.99.2301
v99.99.99.2306
v99.99.99.2307
v99.99.99.2308
v99.99.99.2309
v99.99.99.2310
v99.99.99.2311
v99.99.99.2312
v99.99.99.2313
v99.99.99.2315
v99.99.99.2316
v99.99.99.2317
v99.99.99.2318
v99.99.99.2319
v99.99.99.2320
v99.99.99.2321
v99.99.99.2322
v99.99.99.2327
v99.99.99.2332
v99.99.99.2336
v99.99.99.2337
v99.99.99.2338
v99.99.99.2339
v99.99.99.2342
v99.99.99.2345
v99.99.99.2346
v99.99.99.2347
v99.99.99.2348
v99.99.99.2349
v99.99.99.2350
v99.99.99.2351

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-40864.json"