97 matches found
ONLYOFFICE Docs (DocumentServer) - Reflected Cross-Site Scripting
ONLYOFFICE Docs DocumentServer = 8.3.1 contains a reflected XSS caused by improper sanitization of crafted HTTP POST requests via the WOPI protocol, letting attackers inject malicious scripts reflected in HTML response, exploit requires crafted POST requests. id: CVE-2025-5301 info: name:...
CVE-2020-12432
CVE-2020-12432 Collabora CODE Click here 4. The victim opens the link and gets redirected to another service with all his cookies and local storage data sent over to another network Vi...
CVE-2026-67400
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token...
CVE-2026-67400
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token...
CVE-2026-67400
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token...
EUVD-2026-111129
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token...
CVE-2026-67400
The Nextcloud platform is impacted by a vulnerability where a missing token type check allows an attacker to retrieve additional information regarding the WOPI configuration . This flaw can be triggered using a user or guest token to access unnecessary parts of the configuration. The vulnerabilit...
CVE-2026-67400: Improper Access Control
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token...
PT-2026-126667
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token...
Nextcloud Richdocuments permission and access control issue vulnerability
Nextcloud Richdocuments versions 11.0.0 and earlier contain a permission and access control vulnerability. This flaw stems from a lack of token type validation, potentially allowing users or guests to retrieve additional information related to WOPI configurations using tokens...
GHSA-W89X-C962-C44G Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope
Summary There is a privilege scope bypass in Cloudreve's admin API where two endpoints that mutate server state are missing the write-scope enforcement that their neighboring endpoints correctly apply. Specifically, the WOPI configuration fetch endpoint and the SMTP test/mail endpoint can both be...
Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope
Summary There is a privilege scope bypass in Cloudreve's admin API where two endpoints that mutate server state are missing the write-scope enforcement that their neighboring endpoints correctly apply. Specifically, the WOPI configuration fetch endpoint and the SMTP test/mail endpoint can both be...
CVE-2026-77637
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...
CVE-2026-77637
Cloudreve , a self-hosted file management and sharing system, is affected by a privilege scope bypass prior to version 4.18.0 . The routes tool.GET("wopi") and tool.POST("mail") in routers/router.go inherit the ScopeAdminRead scope but omit the RequiredScopes(types.ScopeAdminWrite) middleware app...
CVE-2026-77637 Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...
EUVD-2026-84529
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...
CVE-2026-77637 Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...
CVE-2026-77637 Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...
PT-2026-96796
Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.18.0 Description A privilege scope bypass exists in the admin API due to inconsistent middleware application in routers/router.go. While most state-changing admin tool routes require ScopeAdminWrite, the endpoints...
CVE-2026-77637: Missing Authorization
Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...