Threat actors are actively exploiting a vulnerability in the optional Collabora Online CODE app for Nextcloud. The security flaw allows attackers to plant malicious web shells on vulnerable servers, enabling arbitrary command execution with web server privileges.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →