A security flaw in Collabora KodExplorer, discovered in the file /app/controller/share.class.php on the fileUpload Endpoint, allows an attacker to manipulate the fileUpload argument and bypass authorization checks. This improper authorization can lead to remote exploitation, enabling an attacker to gain unauthorized access to functionality or data that should otherwise be protected. The vulnerability is classified as having a high attack complexity and is noted to be difficult to exploit, but the fact that remote exploitation is possible raises significant concern.

Collabora KodExplorer versions up to 4.52 are potentially affected. All deployments of KodExplorer relying on the share.class.php based fileUpload Endpoint in these versions are at risk until the flaw is remediated.

The CVSS score of 6.3 indicates moderate severity, and the EPSS score is currently unavailable, which does not provide a clear picture of exploitation likelihood. The vulnerability is not listed in the CISA KEV catalog. Remote attackers could exploit the flaw by sending crafted requests to the fileUpload Endpoint, although the high attack complexity and difficulty suggest that it would not be trivially abused. Nevertheless, the potential for unauthorized access warrants prompt attention.