PT-2023-8594

Name of the Vulnerable Software and Affected Versions application-collabora versions prior to 1.3 Description The issue is related to the application-collabora integration of Collabora Online in XWiki, where the rights of a user over a document are not properly enforced. Specifically, when a user...

CVE-2023-46743: Incorrect Default Permissions

application-collabora is an integration of Collabora Online in XWiki. As part of the application use cases, depending on the rights that a user has over a document, they should be able to open the office attachments files in view or edit mode. Currently, if a user opens an attachment file in edit...