Description
Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| richdocumentscode | Collabora / Collabora Online - Built-in CODE Server | >= 0, < 26.4.303 | affected |