Docmosis Tornado
4 CVEs affecting Docmosis Tornado. Latest disclosed: 2025-03-07. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-42733 | Critical | 9.8 | 2025-03-07 | An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path input |
CVE-2023-25266 | High | 8.8 | 2023-02-28 | An issue was discovered in Docmosis Tornado prior to version 2.9.5. An authenticated attacker can change the Office directory setting pointing to an arbitrary… |
CVE-2023-25265 | High | 7.5 | 2023-02-28 | Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the file system. |
CVE-2023-25264 | High | 7.5 | 2023-02-28 | An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentication check filter completely by introd… |