{"id":"CVE-2024-29182","summary":"Collabora Online Stored Cross-Site-Scripting vulnerability via tooltip","details":"Collabora Online is a collaborative online office suite based on LibreOffice. A stored cross-site scripting vulnerability was found in Collabora Online. An attacker could create a document with an XSS payload in document text referenced by field which, if hovered over to produce a tooltip, could be executed by the user's browser. Users should upgrade to Collabora Online 23.05.10.1 or higher. Earlier series of Collabora Online, 22.04, 21.11, etc. are unaffected.","aliases":["GHSA-9gmw-5q2c-4398"],"modified":"2026-08-12T14:52:07.153779Z","published":"2024-04-04T14:48:16.705Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29182.json","cna_assigner":"GitHub_M","cwe_ids":["CWE-79"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29182.json"},{"type":"ADVISORY","url":"https://github.com/CollaboraOnline/online/security/advisories/GHSA-9gmw-5q2c-4398"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29182"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/collaboraonline/online","events":[{"introduced":"0"},{"fixed":"baa6eeff67b4bf71650b917ed319818e0a22bc65"}],"database_specific":{"cpe":"cpe:2.3:a:collaboraoffice:collabora_online:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"23"},{"fixed":"23.05.10.1"},{"introduced":"0"}],"source":["AFFECTED_FIELD","CPE_RANGE"]}}],"versions":["cp-23.05.9-4","cp-23.05.9-3","cp-23.05.9-2","cp-23.05.9-1","cp-23.05.8-4","cp-23.05.8-3","cp-23.05.8-2","cp-23.05.8-1","cp-23.05.7-5","cp-23.05.7-4","cp-23.05.7-3","cp-23.05.7-2","cp-23.05.7-1","helm-collabora-online-1.1.9","helm-collabora-online-1.1.8","helm-collabora-online-1.1.7","helm-collabora-online-1.1.6","helm-collabora-online-1.1.5","helm-collabora-online-1.1.4","cp-23.05.5-2","helm-collabora-online-1.1.3","cp-23.05.5-1","co-23.05-branch-point","cp-23.05.4-2","cp-23.05.4-1","cp-23.05.3-1","helm-collabora-online-1.1.2","helm-collabora-online-1.1.1","cp-23.05.2-2","cp-23.05.2-1","helm-collabora-online-1.1.0","helm-collabora-online-1.0.2","helm-collabora-online-1.0.1","cp-23.05.1-1","cp-23.05.0-5","cp-23.05.0-4","cp-23.05.0-3","cp-23.05.0-2","cp-23.05.0-1","cp-22.05.10-1","cp-22.05.8-2","cp-22.05.8-1","cp-22.05.7-2","cp-22.05.7-1","cp-22.05.6-1","cp-22.05.5-3","cp-22.05.5-2","cp-22.05.5-1","cp-22.05.4-1","cp-22.05.3-1","cp-22.05.0-1","cp-21.11.3-0","cp-21.11.0-6","cp-21.11.0-5","cp-21.11.0-4","cp-21.11.0-3","cp-21.11.0-2","cp-21.11.0-1","cp-21.11.0-0","cp-21.06.2-0","for-code-assets","libreoffice-7-0-branch-point","co-4-2-0-branch-point","libreoffice-6-4-branch-point","libreoffice-6-3-branch-point","collabora-online-4-branch-point","libreoffice-6-2-branch-point","libreoffice-6-1-branch-point","libreoffice-6-0-branch-point","collabora-online-3-0-branch-point","libreoffice-5-4-branch-point","collabora-online-2-1-branch-point","collabora-online-2-0-branch-point","libreoffice-5-3-branch-point","collabora-online-1-9-branch-point","libreoffice-5-2-branch-point","collabora-online-1-0-branch-point","1.6.2-1","1.6.0-4-CODE","1.6.0-0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-29182.json","vanir_signatures_modified":"2026-08-12T14:52:07Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"123725711331292545528890238042699903388","length":12585},"id":"CVE-2024-29182-03a002c0","signature_type":"Function","signature_version":"v1","source":"https://github.com/collaboraonline/online/commit/baa6eeff67b4bf71650b917ed319818e0a22bc65","target":{"file":"kit/ChildSession.cpp","function":"ChildSession::loKitCallback"}},{"deprecated":false,"digest":{"line_hashes":["316952266872332475521695919215802520802","52823251593393820098598547056623822001","101169483075777190084435824576389057125","20144769585504732963934794505500782257","207330155813765245217610622982892077841","50722812132545840399236107599973511904"],"threshold":0.9},"id":"CVE-2024-29182-b5e8e073","signature_type":"Line","signature_version":"v1","source":"https://github.com/collaboraonline/online/commit/baa6eeff67b4bf71650b917ed319818e0a22bc65","target":{"file":"kit/ChildSession.cpp"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}