Nextcloud Richdocuments 5.0.3

CPE Details

Nextcloud Richdocuments 5.0.3
nextcloud
richdocuments
5.0.3
2022-06-09
12h22 +00:00
2022-06-14
11h24 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:nextcloud:richdocuments:5.0.3:*:*:*:*:*:*:*

Informations

Vendor

nextcloud

Product

richdocuments

Version

5.0.3

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2023-25150 2023-02-08 19h15 +00:00 Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to provide access to any file without proper permission validation. As a result any user with access to Collabora can obtain the content of other users files. It is recommended that the Nextcloud Office App (Collabora Integration) is updated to 7.0.2 (Nextcloud 25), 6.3.2 (Nextcloud 24), 5.0.10 (Nextcloud 23), 4.2.9 (Nextcloud 21-22), or 3.8.7 (Nextcloud 15-20). There are no known workarounds for this issue.
5.8
Moyen
CVE-2022-31024 2022-06-02 16h25 +00:00 richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Prior to versions 6.0.0, 5.0.4, and 4.2.6, a user could be tricked into working against a remote Office by sending them a federated share. richdocuments versions 6.0.0, 5.0.4 and 4.2.6 contain a fix for this issue. There are currently no known workarounds available.
6.5
Moyen