Hackers Exploit Collabora Online Flaw to Backdoor Nextcloud Servers with Web Shells
CybersecurityHackingVulnerabilitiesWeb ShellsNextcloudCollabora OnlineBackdoorSecurity Breach
Attackers exploited a flaw in Collabora Online - Built-in CODE Server, an optional Nextcloud app, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack occurring on September 10. A web shell is described as a small file that executes any command an attacker sends via a web request, operating with the rights of the web server account.