Collabora

Reported Context (2)

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers Attackers Exploit Collabora Code-Execution Flaw in Nextcloud’s Built-In Server App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack Flaw in Nextcloud’s Built-in Collabora CODE App Exploited to Plant Web Shells

CVE (2)

People (3)

MITRE ATT&CK (6)

Vendors (1)

Products (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.