Collabora vulnerabilities

Products

• Kodexplorer 15
• Online 6
• Online - Built-in Code Server 2

Newest

• collabora kodexplorer KodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload CVE-2026-116057 5.3 MediumOctober 25, 2026
• collabora kodexplorer KodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery CVE-2026-116056 5.3 MediumOctober 25, 2026
• collabora online - built-in code server, online – built-in code server +1 more Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app,... CVE-2026-110447 In KEVPublic exploit EPSS 73.3% 9.2 CriticalOctober 14, 2026
• collabora kodexplorer KodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extraction CVE-2026-104081 7.2 HighOctober 9, 2026
• collabora kodexplorer Collabora KodExplorer fileUpload Endpoint share.class.php improper authorization CVE-2026-6572 6.3 MediumApril 19, 2026
• collabora kodexplorer kodcloud KodExplorer systemRole.class.php roleGroupAction authorization CVE-2026-6571 5.3 MediumApril 19, 2026
• collabora kodexplorer kodcloud KodExplorer systemMember.class.php initInstall authorization CVE-2026-6570 5.1 MediumApril 19, 2026
• collabora kodexplorer kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication CVE-2026-6569 6.9 MediumApril 19, 2026
• collabora kodexplorer kodcloud KodExplorer Public Share share.class.php initShareOld path traversal CVE-2026-6568 6.9 MediumApril 19, 2026
• collabora kodexplorer KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint CVE-2025-34504 5.3 MediumDecember 11, 2025
• collabora online - built-in code server, collaboraonline online +1 more Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy CVE-2025-66208 7.2 HighDecember 3, 2025
• collabora online JavaScript Injection via url encoded values in links in Collabora Office Android CVE-2024-45045 6.3 MediumAugust 29, 2024
• collabora online Sensitive Information Disclosure (JailID) to users in Collabora Online CVE-2024-25114 2.6 LowMarch 11, 2024
• collabora kodexplorer kalcaddle KodExplorer app.php index server-side request forgery CVE-2023-6853 6.3 MediumDecember 16, 2023
• collabora kodexplorer kalcaddle KodExplorer app.php server-side request forgery CVE-2023-6852 6.3 MediumDecember 16, 2023
• collabora kodexplorer kalcaddle KodExplorer ZIP Archive app.php unzipList code injection CVE-2023-6851 6.3 MediumDecember 16, 2023
• collabora kodexplorer kalcaddle KodExplorer API Endpoint unrestricted upload CVE-2023-6850 6.3 MediumDecember 16, 2023
• collabora online Reflected XSS vulnerability in CollaboraOnline CVE-2023-31145 4.3 MediumMay 15, 2023
• collabora kodexplorer kalcaddle KodExplorer cross-site request forgery CVE-2022-4944 Public exploit 4.3 MediumApril 22, 2023
• collabora kodexplorer Arbitrary file access in KodExplorer CVE-2022-46154 8.6 HighDecember 6, 2022
• collabora online Reflected Cross-Site-Scripting vulnerability in Collabora Online CVE-2021-43817 8.2 HighDecember 13, 2021
• collabora online Reflected Cross-Site-Scripting vulnerability CVE-2021-32745 7.3 HighJuly 21, 2021
• collabora online Unauthenticated attacker could gain access to currently open files CVE-2021-32744 9.8 CriticalJuly 21, 2021