CVE-2020-11536

CVE-2020-11536 is a critical vulnerability affecting ONLYOFFICE Document Server 5.5.0, allowing an unauthenticated attacker to achieve remote code execution. By crafting a malicious .docx file, an attacker can exploit a flaw in the unzip function to overwrite binary files on the server. This vulnerability carries a CVSS score of 9.8, indicating high severity with no user interaction required and complete compromise of confidentiality, integrity, and availability. Despite its critical nature, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.