Hackers Backdoor Nextcloud Servers via Flaw in Collabora's Built-in CODE App

Attackers exploited a vulnerability in the optional Nextcloud app Collabora Online - Built-in CODE Server to plant web shells on Nextcloud servers. The first logged attack occurred on September 10, and three administrators reported the issue on GitHub.

• Attacks exploited a flaw in Collabora Online - Built-in CODE Server
• Web shell runs commands with web server account rights
• First logged attack occurred on September 10
• Three administrators reported the issue on GitHub