CVE-2022-31024
Federated editing allows iframing remote servers by default in richdocuments
概要
Federated editing allows iframing remote servers by default in richdocuments
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Prior to versions 6.0.0, 5.0.4, and 4.2.6, a user could be tricked into working against a remote Office by sending them a federated share. richdocuments versions 6.0.0, 5.0.4 and 4.2.6 contain a fix for this issue. There are currently no known workarounds available.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web hackerone.com