Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a command-injection flaw in Collabora's optional Built-in CODE Server app for Nextcloud to plant PHP web shells, with the first logged attack on September 10 and three administrators reporting the issue on GitHub. The flaw,...