CVE-2024-37311

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-37311
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-37311.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-37311
Aliases
  • GHSA-hvhm-5c44-977x
Published
2024-08-23T14:26:45.894Z
Modified
2026-08-12T15:15:18.454550Z
Severity
  • 8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N CVSS Calculator
Summary
Collabora Online's remote host TLS certificates are not fully verified
Details

Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections from coolwsd to other hosts may incompletely verify the remote host's certificate's against the full chain of trust. This vulnerability is fixed in Collabora Online 24.04.4.3, 23.05.14.1, and 22.05.23.1.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-295"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/37xxx/CVE-2024-37311.json"
}
References

Affected packages

Git / github.com/collaboraonline/online

Affected ranges

Type
GIT
Repo
https://github.com/collaboraonline/online
Events
Introduced
39ee21ddca6daf5b6d66a8e99d15443e45a9b0cc
Fixed
8628721243bf59b9659e7901b708ef60ee87f4be
Introduced
012b00d6d4530fb7e74fac5c32696c82de028036
Fixed
54a2d4264429d972e4205ec05b36e00e1303cb09
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
bad165851667c08ae4547374e21865c3b4f1c13a
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "24.04.1.1"
        },
        {
            "fixed": "24.04.4.3"
        },
        {
            "introduced": "23.05.0-1"
        },
        {
            "fixed": "23.05.14-1"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "22.05.23.1"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

1.*
1.6.0-0
1.6.0-4-CODE
1.6.2-1
co-23.*
co-23.05-branch-point
Other
co-4-2-0-branch-point
collabora-online-1-0-branch-point
collabora-online-1-9-branch-point
collabora-online-2-0-branch-point
collabora-online-2-1-branch-point
collabora-online-3-0-branch-point
collabora-online-4-branch-point
for-code-assets
libreoffice-5-2-branch-point
libreoffice-5-3-branch-point
libreoffice-5-4-branch-point
libreoffice-6-0-branch-point
libreoffice-6-1-branch-point
libreoffice-6-2-branch-point
libreoffice-6-3-branch-point
libreoffice-6-4-branch-point
libreoffice-7-0-branch-point
cp-21.*
cp-21.06.2-0
cp-21.11.0-0
cp-21.11.0-1
cp-21.11.0-2
cp-21.11.0-3
cp-21.11.0-4
cp-21.11.0-5
cp-21.11.0-6
cp-21.11.3-0
cp-22.*
cp-22.05.0-1
cp-22.05.10-2
cp-22.05.10-6
cp-22.05.10-7
cp-22.05.11-1
cp-22.05.12-1
cp-22.05.12-2
cp-22.05.12-3
cp-22.05.12-4
cp-22.05.14-1
cp-22.05.14-2
cp-22.05.14-3
cp-22.05.15-1
cp-22.05.15-2
cp-22.05.16-1
cp-22.05.17-1
cp-22.05.18-1
cp-22.05.19-1
cp-22.05.20-1
cp-22.05.21-1
cp-22.05.22-1
cp-22.05.22-2
cp-22.05.3-1
cp-22.05.4-1
cp-22.05.5-1
cp-22.05.5-2
cp-22.05.5-3
cp-22.05.6-2
cp-22.05.6-3
cp-22.05.7-3
cp-22.05.7-4
cp-22.05.7-5
cp-22.05.8-3
cp-22.05.8-4
cp-22.05.9-3
cp-22.05.9-4
cp-22.05.9-5
cp-22.05.9-6
cp-23.*
cp-23.05.0-1
cp-23.05.0-2
cp-23.05.0-3
cp-23.05.0-4
cp-23.05.0-5
cp-23.05.1-1
cp-23.05.10-1
cp-23.05.11-1
cp-23.05.12-1
cp-23.05.13-1
cp-23.05.2-1
cp-23.05.2-2
cp-23.05.3-1
cp-23.05.4-1
cp-23.05.4-2
cp-23.05.5-1
cp-23.05.5-2
cp-23.05.7-1
cp-23.05.7-2
cp-23.05.7-3
cp-23.05.7-4
cp-23.05.7-5
cp-23.05.8-1
cp-23.05.8-2
cp-23.05.8-3
cp-23.05.8-4
cp-23.05.9-1
cp-23.05.9-2
cp-23.05.9-3
cp-23.05.9-4
cp-24.*
cp-24.04.1-1
cp-24.04.1-2
cp-24.04.1-3
cp-24.04.2-1
cp-24.04.3-1
cp-24.04.4-1
cp-24.04.4-2
helm-collabora-online-1.*
helm-collabora-online-1.0.1
helm-collabora-online-1.0.2
helm-collabora-online-1.1.0
helm-collabora-online-1.1.1
helm-collabora-online-1.1.15
helm-collabora-online-1.1.16
helm-collabora-online-1.1.17
helm-collabora-online-1.1.2
helm-collabora-online-1.1.3
helm-collabora-online-1.1.4
helm-collabora-online-1.1.5
helm-collabora-online-1.1.6
helm-collabora-online-1.1.7
helm-collabora-online-1.1.8
helm-collabora-online-1.1.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-37311.json"
vanir_signatures 
[
    {
        "target": {
            "file": "wsd/Storage.cpp"
        },
        "deprecated": false,
        "source": "https://github.com/collaboraonline/online/commit/bad165851667c08ae4547374e21865c3b4f1c13a",
        "id": "CVE-2024-37311-10824b1c",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "33240060825508422689783061356871092526",
                "37959778313031036346544832990338660119",
                "194945003374552761539087258057538349728",
                "177844959191370068911328113256191313685",
                "53295121197594261101159513564108881488",
                "163111359089526212073669911205296093059",
                "29184145815082986339269343933654085973",
                "222668626704185494525625406207664523479",
                "13771912527967999841991046855837340111",
                "1298497036757060208446457744914365159",
                "176545128759654935332910989202135941352",
                "265231290620897161009783627730488594426",
                "35905336109803927238107985410464144747",
                "155789988923961308486814915628838841190",
                "142247747007989922670082820230833607807"
            ]
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "file": "wsd/Storage.cpp"
        },
        "deprecated": false,
        "source": "https://github.com/collaboraonline/online/commit/54a2d4264429d972e4205ec05b36e00e1303cb09",
        "id": "CVE-2024-37311-140c1733",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "33240060825508422689783061356871092526",
                "37959778313031036346544832990338660119",
                "194945003374552761539087258057538349728",
                "177844959191370068911328113256191313685",
                "53295121197594261101159513564108881488",
                "163111359089526212073669911205296093059",
                "29184145815082986339269343933654085973",
                "222668626704185494525625406207664523479",
                "13771912527967999841991046855837340111",
                "1298497036757060208446457744914365159",
                "176545128759654935332910989202135941352",
                "265231290620897161009783627730488594426",
                "35905336109803927238107985410464144747",
                "155789988923961308486814915628838841190",
                "142247747007989922670082820230833607807"
            ]
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "function": "StorageBase::initialize",
            "file": "wsd/Storage.cpp"
        },
        "deprecated": false,
        "source": "https://github.com/collaboraonline/online/commit/bad165851667c08ae4547374e21865c3b4f1c13a",
        "id": "CVE-2024-37311-393b6f57",
        "signature_version": "v1",
        "digest": {
            "length": 3097.0,
            "function_hash": "59102960834504974511515326281074103258"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "function": "StorageBase::initialize",
            "file": "wsd/Storage.cpp"
        },
        "deprecated": false,
        "source": "https://github.com/collaboraonline/online/commit/54a2d4264429d972e4205ec05b36e00e1303cb09",
        "id": "CVE-2024-37311-ae19afc3",
        "signature_version": "v1",
        "digest": {
            "length": 3097.0,
            "function_hash": "59102960834504974511515326281074103258"
        },
        "signature_type": "Function"
    }
]
vanir_signatures_modified 
"2026-08-12T15:15:18Z"