Description

Collabora Online is a collaborative online office suite based on LibreOffice technology. Any deployment of voilà dashboard allow local file inclusion. Any file on a filesystem that is readable by the user that runs the voilà dashboard server can be downloaded by someone with network access to the server. Whether this still requires authentication depends on how voilà is deployed. This issue has been patched in 0.2.17, 0.3.8, 0.4.4 and 0.5.6.

INFO

Published Date :

2024-04-03T22:55:20.202Z

Last Modified :

2024-08-02T01:32:06.621Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2024-30265 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-30265.

URL Resource
https://github.com/voila-dashboards/voila/commit/00d6362c237b6b4d466873535554d6076ead0c52 cve-icon cve-icon cve-icon
https://github.com/voila-dashboards/voila/commit/28faacc9b03b160fd8fa920ad045f4ec0667ab67 cve-icon cve-icon cve-icon
https://github.com/voila-dashboards/voila/commit/5542e4ae36bb5d184deaa48f95e76be477756af2 cve-icon cve-icon cve-icon
https://github.com/voila-dashboards/voila/commit/98b6a40fec27723572314fdbba99bdc147d904c8 cve-icon cve-icon cve-icon
https://github.com/voila-dashboards/voila/commit/c045be6988539d07cceeb9f82fc660a49485d504 cve-icon cve-icon cve-icon
https://github.com/voila-dashboards/voila/security/advisories/GHSA-2q59-h24c-w6fg cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact