TI-2023-16934 CVE-2023-34088
Collabora Online has Stored Cross-Site-Scripting vulnerability in admin interface
Priority MEDIUM 40
Collabora Online is a collaborative online office suite.
Collaboraoffice
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Collaboraoffice records in CISA KEVNo Collaboraoffice vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
Priority LOW 34
"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user.
TI-2023-27196 CVE-2023-49788
Improper handling of browser-side provided input in richdocuments path handling
Priority LOW 32
Collabora Online is a collaborative online office suite based on LibreOffice technology.
TI-2023-27192 CVE-2023-49782
Cross-Site-Scripting vulnerability in error message passing in richdocumentscode
Priority LOW 31
Collabora Online is a collaborative online office suite based on LibreOffice technology.
Priority LOW 31
Collabora Online is a collaborative online office suite based on LibreOffice technology.
TI-2020-09949 CVE-2020-12432 · GHSA-w9v6-fcfc-9xr5
The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly…
Priority LOW 29
The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a victim's browser, and lacks proper MIME type access control, which could lead to XSS that steals ac…
Priority LOW 27
Collabora Online is a collaborative online office suite based on LibreOffice.