
karnop/realtime-collaboration-platform
Releases0
infinite locus assignment. A full-stack, real-time collaboration platform similar to Google Docs. Built with Next.js 14, Appwrite, and Liveblocks, it allows multiple users to edit documents simultaneously with near-zero latency, manage versions, and share work instantly.
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 7.4 HIGH | — | ||
CollabPlatform is a full-stack, real-time doc collaboration platform. In all versions of CollabPlatform, the Appwrite project used by the application is misconfigured to allow arbitrary origins in CORS responses while also permitting credentialed requests. An attacker-controlled domain can issue authenticated cross-origin requests and read sensitive user account information, including email address, account identifiers, and MFA status. The issue did not have a fix at the time of publication. | |||