CVE-2024-37311 — HIGH (8.2)

Vulnerability Description

Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections from coolwsd to other hosts may incompletely verify the remote host's certificate's against the full chain of trust. This vulnerability is fixed in Collabora Online 24.04.4.3, 23.05.14.1, and 22.05.23.1.

CVSS Score

8.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

LOW

Availability

NONE

Related Weaknesses (CWE)

CWE-295

References

https://github.com/CollaboraOnline/online/security/advisories/GHSA-hvhm-5c44-977

FAQ

What is CVE-2024-37311?

CVE-2024-37311 is a vulnerability with a CVSS score of 8.2 (HIGH). Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections from coolwsd to other hosts may incompletely verify the remote...

How severe is CVE-2024-37311?

CVE-2024-37311 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-37311?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.