CVEvulnerability

CVE-2024-37311

8.2 HIGH Published 2024-08-23 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-08-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Weaknesses
CWE-295

Description

Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections from coolwsd to other hosts may incompletely verify the remote host's certificate's against the full chain of trust. This vulnerability is fixed in Collabora Online 24.04.4.3, 23.05.14.1, and 22.05.23.1.

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References