Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online – Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10.
A web shell is a small file that executes any command an attacker sends via a web request, with the rights of the web server account. The flaw
The post “Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App” appeared first on The Hacker News
Source:The Hacker News – [email protected] (The Hacker News)