Логотип exploitDog
bind:CVE-2024-30265
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-30265

Количество 2

Количество 2

nvd логотип

CVE-2024-30265

почти 2 года назад

Collabora Online is a collaborative online office suite based on LibreOffice technology. Any deployment of voilà dashboard allow local file inclusion. Any file on a filesystem that is readable by the user that runs the voilà dashboard server can be downloaded by someone with network access to the server. Whether this still requires authentication depends on how voilà is deployed. This issue has been patched in 0.2.17, 0.3.8, 0.4.4 and 0.5.6.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-2q59-h24c-w6fg

почти 2 года назад

Voilà Local file inclusion

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-30265

Collabora Online is a collaborative online office suite based on LibreOffice technology. Any deployment of voilà dashboard allow local file inclusion. Any file on a filesystem that is readable by the user that runs the voilà dashboard server can be downloaded by someone with network access to the server. Whether this still requires authentication depends on how voilà is deployed. This issue has been patched in 0.2.17, 0.3.8, 0.4.4 and 0.5.6.

CVSS3: 7.5
0%
Низкий
почти 2 года назад
github логотип
GHSA-2q59-h24c-w6fg

Voilà Local file inclusion

CVSS3: 7.5
0%
Низкий
почти 2 года назад

Уязвимостей на страницу