PT-2023-24661 · Collabora · Collabora Online

René De Sain + 1 · Published 2023-05-31 · Updated 2023-06-08 · CVE-2023-34088

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Collabora Online versions prior to 22.05.13 Collabora Online versions prior to 21.11.9.1 Collabora Online versions prior to 6.4.27

Description A stored cross-site scripting (XSS) issue was found in Collabora Online. An attacker could create a document with an XSS payload as a document name. If an administrator opened the admin console and navigated to the history page, the document name was injected as unescaped HTML and executed as a script inside the context of the admin console. This could lead to the leak of the administrator JSON web token (JWT) used for the websocket connection.

Recommendations For Collabora Online versions prior to 22.05.13, upgrade to Collabora Online 22.05.13 or higher to receive a patch. For Collabora Online versions prior to 21.11.9.1, upgrade to Collabora Online 21.11.9.1 or higher to receive a patch. For Collabora Online versions prior to 6.4.27, upgrade to Collabora Online 6.4.27 or higher to receive a patch.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-34088

GHSA-7582-PWFH-3PWR

Affected Products

Collabora Online

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34088.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-34088 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34088 · Security Note
• https://github.com/CollaboraOnline/online/security/advisories/GHSA-7582-pwfh-3pwr · Note
• https://t.me/cvenotify/51497 · Telegram Post