This vulnerability in Collabora KodExplorer affects versions up to 4.52 and is located in the fileUpload endpoint of the share.class.php controller. Improper authorization occurs when the fileUpload argument is manipulated, potentially allowing unauthorized remote access or actions. The attack complexity is high, meaning exploitation is difficult, and no privileges or user interaction are needed. Despite public disclosure, the vendor has not issued a patch or official fix, and no known exploits in the wild have been reported.

The vulnerability could allow remote attackers to bypass authorization controls related to file uploads, potentially leading to unauthorized access or modification of files. Given the medium CVSS score (6.3) and the high attack complexity, the impact is moderate. There is no indication of privilege escalation or user interaction requirements. No known exploitation in the wild has been reported.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to the disclosure. Users should monitor vendor communications for updates. Until a fix is released, consider restricting access to the affected endpoints or implementing compensating controls such as network-level restrictions or additional authorization checks if feasible. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.