Vulnerability · Published Jul 21, 2020 · Assigned by mitre

CVE-2020-12432

Medium 6.1

In plain English

A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS NVD)6.1Medium

Exploit odds (30 days)0.9%top 41.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Public PoC

Official description

The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a victim's browser, and lacks proper MIME type access control, which could lead to XSS that steals account credentials via cookies or local storage. The attacker must first obtain an API access token, which can be accomplished if the attacker is able to upload a .docx or .odt file. The associated API endpoints for exploitation are /wopi/files and /wopi/getAccessToken.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.youtube.com/watch?v=_tkRnSr6yc0 x_refsource_MISC
https://github.com/d7x/CVE-2020-12432 x_refsource_MISC