#web-shell
-
Critical flaw in Collabora's Built-in CODE plants web shells on Nextcloud servers
Attackers used an optional Nextcloud app, Collabora Online — Built-in CODE Server, to drop web shells. Disabling the app does not help — it must be updated or removed.