As cited
Copy frozen at (site build).
threat intel
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a critical vulnerability in Collabora Online - Built-in CODE Server, an optional Nextcloud app, to deploy web shells on Nextcloud installations. Three administrators reported the attacks on GitHub, with the earliest incident occurring on September 10. A web shell allows attackers to execute arbitrary commands with the privileges of the web server account.
Why it matters: Nextcloud administrators using Collabora's CODE app must patch immediately to prevent attackers from gaining remote command execution and full server control.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a critical vulnerability in Collabora Online - Built-in CODE Server, an optional Nextcloud app, to deploy web shells on Nextcloud installations. Three administrators reported the attacks on GitHub, with the earliest incident occurring on September 10. A web shell allows attackers to execute arbitrary commands with the privileges of the web server account.
Why it matters: Nextcloud administrators using Collabora's CODE app must patch immediately to prevent attackers from gaining remote command execution and full server control.
- Source published
- First seen by Cybersecurity Tracker