CVE-2020-11536: 
ONLYOFFICE DocumentServer vulnerability analysis and mitigation

CVE-2020-11536 is a remote code execution vulnerability discovered in ONLYOFFICE Document Server version 5.5.0. The vulnerability was identified by the Yandex Security Team, specifically Andrew Krasichkov, and was disclosed in April 2020. The vulnerability affects the DocumentServer component and allows attackers to exploit the unzip function through crafted malicious .docx files (Yandex Advisory).

The vulnerability allows an attacker to craft a malicious .docx file that exploits the unzip function to rewrite binary files on the target system. This can lead to remote code execution on the victim's server. The attack vector requires the attacker to specifically craft a document file that targets the unzip functionality of the DocumentServer component (NVD Database).

The successful exploitation of this vulnerability allows attackers to execute arbitrary code on the victim's server through binary file manipulation. This gives attackers the ability to take control of the affected system and potentially access sensitive information or perform unauthorized operations (Yandex Advisory).

The vulnerability requires the attacker to craft a malicious .docx file that specifically targets the unzip function of the DocumentServer. When this file is processed by the affected system, it can be used to rewrite binary files and achieve remote code execution (Yandex Advisory).

Users should upgrade to a version newer than ONLYOFFICE Document Server 5.5.0. The vulnerability was addressed in subsequent releases of the software (NVD Database).