Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

T2Covered by 1 source · first reported by The Hacker News at 14 Oct, 17:38 UTC

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes any command an…