system
Describe <CVE-2021-3199>.
user
What is <CVE-2021-3199>?
assistant
Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter..