CVE-2023-31145

Collabora Online is a collaborative online office suite based on LibreOffice technology. This vulnerability report describes a reflected XSS vulnerability with full CSP bypass in Nextcloud installations using the recommended bundle. The vulnerability can be exploited to perform a trivial account takeover attack. The vulnerability allows attackers to inject malicious code into web pages, which can be executed in the context of the victim's browser session. This means that an attacker can steal sensitive data, such as login credentials or personal information, or perform unauthorized actions on behalf of the victim, such as modifying or deleting data. In this specific case, the vulnerability allows for a trivial account takeover attack. An attacker can exploit the vulnerability to inject code into the victim's browser session, allowing the attacker to take over the victim's account without their knowledge or consent. This can lead to unauthorized access to sensitive information and data, as well as the ability to perform actions on behalf of the victim. Furthermore, the fact that the vulnerability bypasses the Content Security Policy (CSP) makes it more dangerous, as CSP is an important security mechanism used to prevent cross-site scripting attacks. By bypassing CSP, attackers can circumvent the security measures put in place by the web application and execute their malicious code. This issue has been patched in versions 22.05.13, 21.11.9, and 6.4.27. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-79

• https://github.com/CollaboraOnline/online/security/advisories/GHSA-rqj2-2c2x-gjmmVendor Advisory
• https://github.com/CollaboraOnline/online/security/advisories/GHSA-rqj2-2c2x-gjmmVendor Advisory

Published

May 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3114Terraform Enterprise since v202207-1 did not properly implem…7.7
• CVE-2023-31140OpenProject is open source project management software. Star…6.5
• CVE-2023-31141OpenSearch is open-source software suite for search, analyti…5.9
• CVE-2023-31142Discourse is an open source discussion platform. Prior to ve…5.3
• CVE-2023-31143mage-ai is an open-source data pipeline tool for transformin…9.8
• CVE-2023-31144Craft CMS is a content management system. Starting in versio…6.1
• CVE-2023-31146Vyper is a Pythonic smart contract language for the Ethereum…9.1
• CVE-2023-31147c-ares is an asynchronous resolver library. When /dev/urando…6.5
• CVE-2023-31148An Improper Input Validation vulnerability in the Schweitz…8.8
• CVE-2023-31149 An Improper Input Validation vulnerability in the Schweit…8.8
• CVE-2023-3115An issue has been discovered in GitLab EE affecting all vers…4.3
• CVE-2023-31150 A Storing Passwords in a Recoverable Format vulnerability i…6.5