CVE-2023-49782

CVE-2023-49782 affects Collabora Online’s built-in CODE server (richdocumentscode) prior to version 23.5.601, exposed via proxy.php. The vulnerability is a cross-site scripting flaw in error message handling that could be triggered by crafted input. Fixed in 23.5.601; upgrade is advised. Some sou...

CVE-2023-49788

Collabora Online’s Built-in CODE Server (richdocumentscode) is vulnerable to commands from the client that could overwrite files outside the transient session subdirectory. The issue affects vulnerable richdocumentscode versions and is mitigated by upgrading to release 23.5.602; users are advised...