Approved changes feed: RSS · Atom
cpe:2.3:a:collaboraoffice:online:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Collaboraoffice (8b756955-5062-56d1-aec6-76637288a4c1) |
|---|---|
| Product | Online (1c29e638-2361-53d1-b464-04418fda4a48) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/collaboraonline/online |
purl2cpe | 2026-06-01 10:15:43.723866 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-25630 |
vulnerable | 2026-06-08 05:30:41.130643 |
Details available
"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it was invoked by the "lool" user, and refuses to run with privileges, if it's not the case. In the vulnerable version of "loolforkit" this check was wrong, so a normal user could start "loolforkit" and eventually get local root privileges.
Published: 2021-02-23T15:33:49.271Z
Updated: 2024-09-16T22:14:42.289Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.