Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: The Document Foundation LibreOffice — GLSA-202311-15 Clear all filters
TI-2023-02114 CVE-2023-2255 · GHSA-6pmq-j4m3-q2r8

Remote documents loaded without prompt via IFrame

Priority LOW 28

Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02225 Published 2023-05-25 Partial fix · 7.4.7, 7.5.3 CWE-264
TI-2023-00901 CVE-2023-0950 · GHSA-qv23-hw3g-384q

Array Index UnderFlow in Calc Formula Parsing

Priority LOW 36

Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.003 Published 2023-05-25 Partial fix · 7.4.6, 7.5.1 CWE-129