CVE-2022-48422

ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located.

• CWE-427
• CWE-427

• https://forum.onlyoffice.com/t/security-hole-library-from-cwd/3302Exploit, Issue Tracking, Third Party Advisory
• https://forum.onlyoffice.com/t/security-hole-library-from-cwd/3302Exploit, Issue Tracking, Third Party Advisory

Published

Mar 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-48390In telephony service, there is a possible missing permission…7.8
• CVE-2022-48391In telephony service, there is a possible missing permission…5.5
• CVE-2022-48392In dialer service, there is a possible missing permission ch…7.8
• CVE-2022-4840Cross-site Scripting (XSS) - Stored in GitHub repository use…5.4
• CVE-2022-4841Cross-site Scripting (XSS) - Stored in GitHub repository use…5.4
• CVE-2022-4842A flaw NULL Pointer Dereference in the Linux kernel NTFS3 dr…5.5
• CVE-2022-48423In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not…7.8
• CVE-2022-48424In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not …7.8
• CVE-2022-48425In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an i…7.8
• CVE-2022-48426In JetBrains TeamCity before 2022.10.3 stored XSS in Perforc…5.4
• CVE-2022-48427In JetBrains TeamCity before 2022.10.3 stored XSS on “Pendin…5.4
• CVE-2022-48428In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH…5.4