A critical unauthenticated OS command injection flaw in Collabora Online’s built-in CODE Server app for Nextcloud lets remote attackers run commands as the web server user. The advisory rates it 9.2 on CVSS v4. Collabora Online vulnerability According to the security advisory published by Collabora Online on GitHub, the vulnerability is tracked as... Weiterlesen: Critical Collabora Online Flaw Lets Attackers Execute Commands on Nex…
Intelligence View
⚡ tsecurity.de Intelligence
Critical Collabora Online Flaw Lets Attackers Execute Commands on Nextcloud Servers
A critical unauthenticated OS command injection flaw in Collabora Online’s built-in CODE Server app for Nextcloud lets remote attackers run commands as the web …
Sicherheitslücken (CVE) GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0001 · T1190 Cloud & IT-Enterprise
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
6 Quellen
CVE-2020-6153 | AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 SOAP FavoritesService.asmx HTTP Request sql injection
5 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2020-13521 | AVEVA eDNA Enterprise Data Historian SOAP ednareporting.asmx psAttribute sql injection VVulDB Updatesvor 4 Std.CVE-2020-13508 | AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 Web Service Alias.asmx AliasName sql injection VVulDB Updatesvor 4 Std.CVE-2020-13503 | AVEVA eDNA Enterprise Data Historian SOAP ednareporting.asmx AttFilterName sql injection VVulDB Updatesvor 4 Std.CVE-2020-13507 | AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 Web Service Alias.asmx HTTP Requests sql injection VVulDB Updatesvor 4 Std.CVE-2020-13502 | AVEVA eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053 Web Service DNAPoints.asmx HTTP Request sql injection
5 Quellen
CVE-2024-26770 | Linux Kernel up to 6.6.18/6.7.6 nvidia-shield devm_kasprintf null pointer dereference (83527a13740f/e71cc4a1e584/b6eda11c44dc / WID-SEC-2024-0773)
4 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2024-26771 | Linux Kernel up to 6.7.6 dmaengine devm_kasprintf null pointer dereference (WID-SEC-2024-0773) VVulDB Updatesvor 4 Std.CVE-2024-26774 | Linux Kernel up to 5.15.149/6.1.79/6.6.18/6.7.6 ext4 mb_update_avg_fragment_size divide by zero (Nessus ID 210815 / WID-SEC-2024-0773) VVulDB Updatesvor 4 Std.CVE-2024-26775 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 aoe set_capacity deadlock (Nessus ID 227916 / WID-SEC-2024-0773) VVulDB Updatesvor 4 Std.CVE-2024-26776 | Linux Kernel up to 6.7.6 hisi-sfc-v3xx null pointer dereference (WID-SEC-2024-0773)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4276224/sicherheitsluecken-cve/critical-collabora-online-flaw-lets-attackers-execute-commands-on-nextcloud-servers/