Server: Bypass of shared files password protection in "documents" application

The “documents” application is a collaborative web-based online editor for ODT files. Using this application you can easily share and collaborate on office documents.

Due to missing access control within the API of this application, the password-protection of shared files can be bypassed.

For more information please consult the official advisory.

This advisory is licensed CC BY-SA 4.0