CVE-2024-29182

Collabora Online is a collaborative online office suite based on LibreOffice. A stored cross-site scripting vulnerability was found in Collabora Online. An attacker could create a document with an XSS payload in document text referenced by field which, if hovered over to produce a tooltip, could be executed by the user's browser. Users should upgrade to Collabora Online 23.05.10.1 or higher. Earlier series of Collabora Online, 22.04, 21.11, etc. are unaffected.

• CWE-79

• https://github.com/CollaboraOnline/online/security/advisories/GHSA-9gmw-5q2c-4398Third Party Advisory
• https://github.com/CollaboraOnline/online/security/advisories/GHSA-9gmw-5q2c-4398Third Party Advisory

Published

Apr 4, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-29177Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, L…2.7
• CVE-2024-29178On versions before 2.1.4, a user could log in and perform a …8.8
• CVE-2024-29179phpMyFAQ is an open source FAQ web application for PHP 8.1+ …4.8
• CVE-2024-2918Improper input validation in PAM JIT elevation feature in De…3.6
• CVE-2024-29180Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-m…7.5
• CVE-2024-29181Strapi is an open-source content management system. Prior to…3.5
• CVE-2024-29183OpenRASP is a RASP solution that directly integrates its pro…6.1
• CVE-2024-29184FreeScout is a self-hosted help desk and shared mailbox. A S…8
• CVE-2024-29185FreeScout is a self-hosted help desk and shared mailbox. Ver…9
• CVE-2024-29186Bref is an open-source project that helps users go serverles…5.3
• CVE-2024-29187WiX toolset lets developers create installers for Windows In…7.3
• CVE-2024-29188WiX toolset lets developers create installers for Windows In…7.9