Collabora
Collabora Online: vulnerabilidades y CVE
Collabora Online tiene 12 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses2
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-23623 | Media (5.3) | 0.22% | — | 6 feb 2026 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to Collabora Online Development Edition version 25.04.08.2 and prior to Collabora Online versions 23.05.20.1, 24.04.17.3,… |
| CVE-2025-66208 | Alta (7.2) | 1.1% | — | 3 dic 2025 | Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a… |
| CVE-2025-27791 | Alta (8.3) | 0.47% | — | 15 abr 2025 | Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4, 23.05.19, and 22.05.25, there is a path traversal flaw in handling the CheckFileInfo BaseFileName… |
| CVE-2025-24796 | Media (6.3) | 0.51% | — | 6 mar 2025 | Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each… |
| CVE-2024-45045 | Media (6.1) | 0.29% | — | 29 ago 2024 | Collabora Online is a collaborative online office suite based on LibreOffice technology. In the mobile (Android/iOS) device variants of Collabora Online it was possible to inject JavaScript via url encoded values in… |
| CVE-2024-37311 | Alta (8.2) | 0.23% | — | 23 ago 2024 | Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections from coolwsd to other hosts may incompletely verify the remote host's… |
| CVE-2024-30265 | Alta (7.5) | 0.73% | — | 3 abr 2024 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Any deployment of voilà dashboard allow local file inclusion. Any file on a filesystem that is readable by the user that runs the… |
| CVE-2024-25114 | Media (5.3) | 0.47% | — | 11 mar 2024 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Each document in Collabora Online is opened by a separate "Kit" instance in a different "jail" with a unique directory "jailID"… |
| CVE-2023-31145 | Media (6.1) | 0.40% | — | 15 may 2023 | Collabora Online is a collaborative online office suite based on LibreOffice technology. This vulnerability report describes a reflected XSS vulnerability with full CSP bypass in Nextcloud installations using the… |
| CVE-2021-43817 | Media (6.1) | 0.65% | — | 13 dic 2021 | Collabora Online is a collaborative online office suite based on LibreOffice technology. In affected versions a reflected XSS vulnerability was found in Collabora Online. An attacker could inject unescaped HTML into a… |
| CVE-2021-32745 | Media (6.1) | 0.60% | — | 21 jul 2021 | Collabora Online is a collaborative online office suite. A reflected XSS vulnerability was found in Collabora Online prior to version 6.4.9-5. An attacker could inject unescaped HTML into a variable as they created the… |
| CVE-2021-32744 | Alta (7.5) | 1.1% | — | 21 jul 2021 | Collabora Online is a collaborative online office suite. In versions prior to 4.2.17-1 and version 6.4.9-5, unauthenticated attackers are able to gain access to files which are currently opened by other users in the… |