Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-49782

Cross-Site-Scripting vulnerability in error message passing in richdocumentscode

Description

Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with `Collabora Online - Built-in CODE Server` app can be vulnerable to attack via proxy.php. The bug was fixed in Collabora Online - Built-in CODE Server (richdocumentscode) release 23.5.601. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CollaboraOnline online

  • < 23.5.601affected

References