| Package | Affected versions | Patched versions |
|---|---|---|
| richdocuments | = 6.0.0≥ 5.0.0, < 5.0.4< 4.2.6 | 5.0.44.2.6 |
richdocuments is the repository for NextCloud Collabra, the app for Nextcloud Office collaboration. Prior to versions 6.0.0, 5.0.4, and 4.2.6, a user could be tricked into working against a remote Office by sending them a federated share. richdocuments versions 6.0.0, 5.0.4 and 4.2.6 contain a fix for this issue. There are currently no known workarounds available.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free