Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Document Foundation LibreOffice — openSUSE-SU-2019:2361 Clear all filters
TI-2019-07237 CVE-2019-9855 · GHSA-873f-q5vx-w7hm

Windows 8.3 path equivalence handling flaw allows LibreLogo script execution

Priority MEDIUM 47

LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02963 Published 2019-09-06 Fixed in 6.2.7, 6.3.1 CWE-417
TI-2019-07236 CVE-2019-9854 · GHSA-54x7-phmv-8vq8

Unsafe URL assembly flaw in allowed script location check

Priority LOW 38

LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01756 Published 2019-09-06 Partial fix · 6.2.7, 6.3.1 CWE-22