PT-2023-24661 · Collabora · Collabora Online

René De Sain + 1 · Publicado 2023-05-31 · Atualizado 2023-06-08 · CVE-2023-34088

Positive Technologies (AI Summary)

CVSS v3.1

8.7

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Collabora Online versions prior to 22.05.13 Collabora Online versions prior to 21.11.9.1 Collabora Online versions prior to 6.4.27

Description A stored cross-site scripting (XSS) issue was found in Collabora Online. An attacker could create a document with an XSS payload as a document name. If an administrator opened the admin console and navigated to the history page, the document name was injected as unescaped HTML and executed as a script inside the context of the admin console. This could lead to the leak of the administrator JSON web token (JWT) used for the websocket connection.

Recommendations For Collabora Online versions prior to 22.05.13, upgrade to Collabora Online 22.05.13 or higher to receive a patch. For Collabora Online versions prior to 21.11.9.1, upgrade to Collabora Online 21.11.9.1 or higher to receive a patch. For Collabora Online versions prior to 6.4.27, upgrade to Collabora Online 6.4.27 or higher to receive a patch.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-34088

GHSA-7582-PWFH-3PWR

Produtos afetados

Collabora Online

Referências · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34088.json · Exploit
• https://github.com/CollaboraOnline/online/security/advisories/GHSA-7582-pwfh-3pwr · Nota
• https://t.me/cvenotify/51497 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-34088 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-34088 · Nota de Segurança