CVE-2024-37311: Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections from coolwsd to other…

PriorityP343high8.2CVSS 3.1

AVNACLPRNUINSUCHILAN

EPSS

0.23%

13.6th percentile

Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections from coolwsd to other hosts may incompletely verify the remote host's certificate's against the full chain of trust. This vulnerability is fixed in Collabora Online 24.04.4.3, 23.05.14.1, and 22.05.23.1.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
collaboraonline	online	< 22.05.23.1	22.05.23.1
collaboraonline	online	—	—
collaboraonline	online	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.