PT-2021-19902 · Collabora+1 · Collabora Editor+1

Rtod · Published 2021-07-27 · Updated 2021-08-09 · CVE-2021-32748

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud Richdocuments versions prior to 3.8.3 Nextcloud Richdocuments versions prior to 4.2.0

Description The communication between Nextcloud Richdocuments and the Collabora Editor using the WOPI protocol was not protected by credentials or IP checks. This can result in a bypass of any enforced watermark on documents, as described on the Nextcloud Virtual Data Room website. It primarily affects the configured watermark or download protection using File Access Control.

Recommendations For Nextcloud Richdocuments versions prior to 3.8.3, upgrade to version 3.8.3 and configure the allowlist to a list of Collabora servers. For Nextcloud Richdocuments versions prior to 4.2.0, upgrade to version 4.2.0 and configure the allowlist to a list of Collabora servers. As a temporary workaround, consider restricting access to the WOPI API until the issue is resolved.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2021-32748

GHSA-24X8-H6M2-9JF2

Affected Products

Collabora Editor

Nextcloud Richdocuments

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-32748 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32748 · Vendor Advisory
• https://github.com/nextcloud/richdocuments/pull/1640 · Note
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-24x8-h6m2-9jf2 · Note
• https://t.me/cvenotify/18935 · Telegram Post
• https://hackerone.com/reports/1194606 · Note
• https://t.me/cibsecurity/26548 · Telegram Post