CVE-2024-37311
High
Description
Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections from coolwsd to other hosts may incompletely verify the remote host's certificate's against the full chain of trust. This vulnerability is fixed in Collabora Online 24.04.4.3, 23.05.14.1, and 22.05.23.1.
SeverityHigh
CVSS8.2
Exploit probability—
ProductOnline
PublishedAug 23, 2024
First seenAug 23, 2024
Weakness typeCWE-295CWE-295
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| CollaboraOnline online | >= 24.04.1.1, < 24.04.4.3, >= 23.05.0-1, < 23.05.14-1, < 22.05.23.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.