PT-2023-23178 · Collabora · Collabora Online

Timarpublished · Published 2023-05-15 · Updated 2023-05-24 · CVE-2023-31145

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Collabora Online versions prior to 22.05.13 Collabora Online versions prior to 21.11.9 Collabora Online versions prior to 6.4.27

Description This issue describes a reflected XSS vulnerability with full CSP bypass in Nextcloud installations using the recommended bundle. The vulnerability can be exploited to perform a trivial account takeover attack, allowing attackers to inject malicious code into web pages, which can be executed in the context of the victim's browser session. This means that an attacker can steal sensitive data, such as login credentials or personal information, or perform unauthorized actions on behalf of the victim, such as modifying or deleting data. The fact that the vulnerability bypasses the Content Security Policy (CSP) makes it more dangerous, as CSP is an important security mechanism used to prevent cross-site scripting attacks.

Recommendations To resolve the issue, upgrade to version 22.05.13 or later. To resolve the issue, upgrade to version 21.11.9 or later. To resolve the issue, upgrade to version 6.4.27 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-31145

GHSA-RQJ2-2C2X-GJMM

Affected Products

Collabora Online

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/31xxx/CVE-2023-31145.json · Exploit
• https://github.com/CollaboraOnline/online/security/advisories/GHSA-rqj2-2c2x-gjmm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31145 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31145 · Vendor Advisory
• https://t.me/cibsecurity/64173 · Telegram Post