CVE-2020-12432

MEDIUM

6.1

Descripcion

The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a victim's browser, and lacks proper MIME type access control, which could lead to XSS that steals account credentials via cookies or local storage. The attacker must first obtain an API access token, which can be accomplished if the attacker is able to upload a .docx or .odt file. The associated API endpoints for exploitation are /wopi/files and /wopi/getAccessToken.

Detalles CVE

Puntuacion CVSS v3.16.1

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado7/21/2020

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

collaboraoffice:collabora_online_development_edition

Debilidades (CWE)

CWE-79

Referencias

https://github.com/d7x/CVE-2020-12432(cve@mitre.org)

https://www.youtube.com/watch?v=_tkRnSr6yc0(cve@mitre.org)

https://github.com/d7x/CVE-2020-12432(af854a3a-2127-422b-91ae-364da2661108)

https://www.youtube.com/watch?v=_tkRnSr6yc0(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.