CVE-2024-29182 Collabora Online Stored Cross-Site-Scripting vulnerability via tooltip

Medium 6.1 Published 4 Apr 2024 Updated 2 Aug 2024

An attacker can execute arbitrary JavaScript in a victim's browser by crafting a document with a malicious tooltip payload in Collabora Online.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2024-29182?

CVE-2024-29182 is a medium-severity cross-site scripting vulnerability in CollaboraOnline online, published on 4 Apr 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Collabora Online is a collaborative online office suite based on LibreOffice. A stored cross-site scripting vulnerability was found in Collabora Online. An attacker could create a document with an XSS payload in document text referenced by field which, if hovered over to produce a tooltip, could be executed by the user's browser. Users should upgrade to Collabora Online 23.05.10.1 or higher. Earlier series of Collabora Online, 22.04, 21.11, etc. are unaffected.

Weakness: CWE-79

Which versions are affected by CVE-2024-29182?

It affects 1 product.

Products include Collaboraoffice Collabora Online.

How do I fix CVE-2024-29182?

No fix has been published for CVE-2024-29182 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2024-29182 being exploited?

There is no known exploitation of CVE-2024-29182 in the wild and no public exploit code.

Sources

Also known as GHSA-9gmw-5q2c-4398.