Collaboraonline Online vulnerabilities

CVE-2025-66208 [CRITICAL] CWE-78 CVE-2025-66208: Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of t Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy. Users of Nextcloud with Collabora Online - Built-in CODE Server ap

CVE-2025-27791 [HIGH] CWE-23 CVE-2025-27791: Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4, 23.05.19, and 22.05.25, there is a path traversal flaw in handling the CheckFileInfo BaseFileName field returned from WOPI servers. This allows for a file to be written anywhere the uid running Collabora Online can write, if such a

CVE-2021-32744 [HIGH] CWE-639 CVE-2021-32744: Collabora Online is a collaborative online office suite. In versions prior to 4.2.17-1 and version 6 Collabora Online is a collaborative online office suite. In versions prior to 4.2.17-1 and version 6.4.9-5, unauthenticated attackers are able to gain access to files which are currently opened by other users in the Collabora Online editor. For successful exploitation the attacker is required to guess the file identifier - the predictability of this f

CVE-2024-37311 [HIGH] CWE-295 CVE-2024-37311: Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions o Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections from coolwsd to other hosts may incompletely verify the remote host's certificate's against the full chain of trust. This vulnerability is fixed in Collabora Online 24.04.4.3, 23.05.14.1, and 22.05.23.1.

CVE-2023-49788 [HIGH] CWE-22 CVE-2023-49788: Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a st Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CODE Server (richdocumentscode) is run without chroot sandboxing. Vulnerable versions of the richdocumentscode app can be susceptible to attack via modified client->server commands to overwrite fil

CVE-2025-24796 [MEDIUM] CWE-829 CVE-2025-24796: Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disab Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations controlled by the net.lok_allow configuration option, w

CVE-2026-23623 [MEDIUM] CWE-285 CVE-2026-23623: Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to Co Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to Collabora Online Development Edition version 25.04.08.2 and prior to Collabora Online versions 23.05.20.1, 24.04.17.3, and 25.04.7.5, a user with view-only rights and no download privileges can obtain a local copy of a shared file. Although there are no

CVE-2024-45045 [MEDIUM] CWE-84 CVE-2024-45045: Collabora Online is a collaborative online office suite based on LibreOffice technology. In the mobi Collabora Online is a collaborative online office suite based on LibreOffice technology. In the mobile (Android/iOS) device variants of Collabora Online it was possible to inject JavaScript via url encoded values in links contained in documents. Since the Android JavaScript interface allows access to internal functions, the likelihood that the app co

CVE-2023-49782 [MEDIUM] CWE-79 CVE-2023-49782: Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Ne Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with `Collabora Online - Built-in CODE Server` app can be vulnerable to attack via proxy.php. The bug was fixed in Collabora Online - Built-in CODE Server (richdocumentscode) release 23.5.601. Users are advised to upgrade. There are no known wo

CVE-2023-48314 [MEDIUM] CWE-79 CVE-2023-48314: Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Ne Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with Collabora Online Built-in CODE Server app can be vulnerable to attack via proxy.php. This vulnerability has been fixed in Collabora Online - Built-in CODE Server (richdocumentscode) release 23.5.403. Users are advised to upgrade. There are

CVE-2024-25114 [MEDIUM] CWE-200 CVE-2024-25114: Collabora Online is a collaborative online office suite based on LibreOffice technology. Each docume Collabora Online is a collaborative online office suite based on LibreOffice technology. Each document in Collabora Online is opened by a separate "Kit" instance in a different "jail" with a unique directory "jailID" name. For security reasons, this directory name is randomly generated and should not be given out to the client. In affected versions

CVE-2021-43817 [MEDIUM] CWE-79 CVE-2021-43817: Collabora Online is a collaborative online office suite based on LibreOffice technology. In affected Collabora Online is a collaborative online office suite based on LibreOffice technology. In affected versions a reflected XSS vulnerability was found in Collabora Online. An attacker could inject unescaped HTML into a variable as they created the Collabora Online iframe, and execute scripts inside the context of the Collabora Online iframe. This woul

CVE-2023-31145 [MEDIUM] CWE-79 CVE-2023-31145: Collabora Online is a collaborative online office suite based on LibreOffice technology. This vulner Collabora Online is a collaborative online office suite based on LibreOffice technology. This vulnerability report describes a reflected XSS vulnerability with full CSP bypass in Nextcloud installations using the recommended bundle. The vulnerability can be exploited to perform a trivial account takeover attack. The vulnerability allows attackers to

CVE-2021-32745 [MEDIUM] CWE-79 CVE-2021-32745: Collabora Online is a collaborative online office suite. A reflected XSS vulnerability was found in Collabora Online is a collaborative online office suite. A reflected XSS vulnerability was found in Collabora Online prior to version 6.4.9-5. An attacker could inject unescaped HTML into a variable as they created the Collabora Online iframe, and execute scripts inside the context of the Collabora Online iframe. This would give access to a small set

CVE-2024-29182 [MEDIUM] CWE-79 CVE-2024-29182: Collabora Online is a collaborative online office suite based on LibreOffice. A stored cross-site sc Collabora Online is a collaborative online office suite based on LibreOffice. A stored cross-site scripting vulnerability was found in Collabora Online. An attacker could create a document with an XSS payload in document text referenced by field which, if hovered over to produce a tooltip, could be executed by the user's browser. Users should upgrade

CVE-2023-34088 [MEDIUM] CWE-79 CVE-2023-34088: Collabora Online is a collaborative online office suite. A stored cross-site scripting (XSS) vulnera Collabora Online is a collaborative online office suite. A stored cross-site scripting (XSS) vulnerability was found in Collabora Online prior to versions 22.05.13, 21.11.9.1, and 6.4.27. An attacker could create a document with an XSS payload as a document name. Later, if an administrator opened the admin console and navigated to the history page, t