High severity7.1NVD Advisory· Published Dec 8, 2023· Updated Jun 17, 2026

CVE-2023-49782

Description

Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with Collabora Online - Built-in CODE Server app can be vulnerable to attack via proxy.php. The bug was fixed in Collabora Online - Built-in CODE Server (richdocumentscode) release 23.5.601. Users are advised to upgrade. There are no known workarounds for this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Collaboraoffice/Richdocumentscode
cpe:2.3:a:collaboraoffice:richdocumentscode:*:*:*:*:*:nextcloud:*:*
Range: <23.5.601
Collaboraonline/Onlinellm-create2 versions
= 23.5.601+ 1 more
- (no CPE)range: = 23.5.601
- (no CPE)range: < 23.5.601

Patches

Vulnerability mechanics

References

github.com/CollaboraOnline/online/security/advisories/GHSA-8xm5-pgfr-8mjrnvdVendor Advisory
apps.nextcloud.com/apps/richdocumentscodenvdProduct

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000