CVE-2025-66208

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-66208
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-66208.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-66208
Aliases
  • GHSA-j3q6-q5pc-v5wf
Published
2025-12-03T18:25:59Z
Modified
2026-11-04T10:46:04Z
Severity
  • 7.2 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U CVSS Calculator
Summary
Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy
Details

Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy. Users of Nextcloud with Collabora Online - Built-in CODE Server app can be vulnerable to attack via proxy.php and an intermediate reverse proxy. This vulnerability is fixed in 25.04.702.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-78"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66208.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "25.04.702"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StringRangeExpression"
                }
            ]
        },
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "25.04.702"
                        },
                        {
                            "fixed": "25.04.702"
                        }
                    ],
                    "source": "DESCRIPTION"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/collaboraonline/richdocumentscode

Affected ranges

Type
GIT
Repo
https://github.com/collaboraonline/richdocumentscode
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0c6582e6bb6b625be89c59ed619f0a0792ea8bd2
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:collabora:collabora_online_-_built-in_code_server:*:*:*:*:*:nextcloud:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "25.4.702"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

21.*
21.11.103
21.11.202
21.11.203
21.11.204
21.11.3
21.11.306
21.11.4
21.11.402
21.11.502
21.11.6
22.*
22.5.1002
22.5.1201
22.5.1301
22.5.301
22.5.401
22.5.502
22.5.702
22.5.802
23.*
23.5.1001
23.5.102
23.5.103
23.5.104
23.5.202
23.5.301
23.5.4
23.5.401
23.5.402
23.5.403
23.5.5
23.5.501
23.5.502
23.5.503
23.5.601
23.5.602
23.5.604
23.5.702
23.5.705
23.5.904
24.*
24.4.1002
24.4.102
24.4.103
24.4.1102
24.4.1203
24.4.1204
24.4.1302
24.4.1303
24.4.201
24.4.402
24.4.502
24.4.602
24.4.701
24.4.702
24.4.802
24.4.901
24.4.902
25.*
25.4.201
25.4.202
25.4.301
25.4.402
25.4.403
25.4.502
25.4.503
25.4.504
25.4.602
4.*
4.2.301
4.2.400
4.2.401
4.2.402
4.2.403
4.2.404
4.2.405
4.2.406
4.2.407
4.2.602
4.2.800
6.*
6.4.003
6.4.007
6.4.009
6.4.010
6.4.011
6.4.013
6.4.1002
6.4.1003
6.4.1004
6.4.1103
6.4.13
6.4.1303
6.4.14
6.4.202
6.4.203
6.4.301
6.4.302
6.4.303
6.4.403
6.4.503
6.4.601
6.4.606
6.4.607
6.4.608
6.4.702
6.4.703
6.4.704
6.4.705
6.4.806

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-66208.json"