4 matches found
CVE-2026-48164
Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, the hostsessionid query/form parameter is substituted into the cool.html editor page without HTML encoding, unlike parameters passed through the existing variable-encoding...
CVE-2026-48164 Collabora Online: Reflected HTML injection through host_session_id
Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, the hostsessionid query/form parameter is substituted into the cool.html editor page without HTML encoding, unlike parameters passed through the existing variable-encoding...
EUVD-2026-114089
Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, the hostsessionid query/form parameter is substituted into the cool.html editor page without HTML encoding, unlike parameters passed through the existing variable-encoding...
CVE-2026-48164
Collabora Online , a suite based on LibreOffice technology, is vulnerable to Reflected HTML injection in versions prior to 24.04.18 and 25.04.11 . The root cause is the substitution of the host_session_id query/form parameter into the cool.html editor page without proper HTML encoding . An attack...