ZDF
Sign inSign up

Vulnerabilities

Vulnerability · CVE-2025-27791

Collabora Online is a collaborative online office suite based on LibreOffice technology.

Published Apr 15, 2025 · catalog updated Apr 15, 2025 · CollaboraOnline

Check this week

CVE-2025-27791 is not in CISA KEV. FIRST estimates a 48.00% chance of exploitation in the next 30 days. Check whether you run CollaboraOnline.

Gaps on this record

  • No vendor fix or required action is stored. Compare the linked advisory before you change production.
Severity
High8.3
Known exploitation
Not in CISA/VulnCheck KEV
EPSS
48.00%
Remediation
Version ranges on file
Affected products
vendor CollaboraOnline online 23.05.0, < 23.05.19

Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4, 23.05.19, and 22.05.25, there is a path traversal flaw in handling the CheckFileInfo BaseFileName field returned from WOPI servers. This allows for a file to be written anywhere the uid running Collabora Online can write, if such a response was supplied by a malicious WOPI server. By combining this flaw with a Time of Check, Time of Use DNS lookup issue with a WOPI server address under attacker control, it is possible to present such a response to be processed by a Collabor

Are you affected?

Enter the version you run. The result uses only the ranges stored on this record.

The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.

  • vendor CollaboraOnline online 23.05.0, < 23.05.1923.05.0, < 23.05.19

How to fix CVE-2025-27791

What to do

Three questions, each answered from this record only. Confirm the vendor advisory before you patch.

Should you patch?

CVE-2025-27791 is not in CISA KEV. FIRST estimates a 48.00% chance of exploitation in the next 30 days. Check whether you run CollaboraOnline.

Which versions are affected?

Compare what you have installed with CollaboraOnline online 23.05.0, < 23.05.19 23.05.0, < 23.05.19. Compare the installed version with the linked vendor advisory before you change production.

What should an analyst verify?

No weakness class is stored. EPSS 48.00%. There is no CISA KEV listing. No Exploit-DB or Metasploit reference is linked. Use the source links for the original advisory.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 15, 2025 · EUVD

    Detected

    Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4, 23.05.19, and 22.05.25, there is a path traversal flaw in handling the CheckFileInfo BaseFileName field returned from WOPI servers. This allows for a file to be written anywhere the uid running Collabora Online can write, if such a response was supplied by a malicious WOPI serv

  2. Apr 15, 2025 · EUVD

    Updated

    Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4, 23.05.19, and 22.05.25, there is a path traversal flaw in handling the CheckFileInfo BaseFileName field returned from WOPI servers. This allows for a file to be written anywhere the uid running Collabora Online can write, if such a response was supplied by a malicious WOPI serv

Sources

  • CVE.orgVulnerability recordCVE-2025-27791

    Official CVE identifier

    cve.org
  • EUVDVulnerability recordEUVD-2025-14833

    Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4, 23.05.19, and 22.05.25, there is a path traversal flaw in handling the CheckFileInfo BaseFileName field returned from WOPI servers. This allows for a file to

    euvd.enisa.europa.eu

References

Freshness

Last verified in this catalog Oct 18, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.