TI-2022-09688 CVE-2022-26306 · GHSA-v7pr-9gfg-7hpc
Execution of Untrusted Macros Due to Improper Certificate Validation
Priority LOW 35
LibreOffice supports the storage of passwords for web connections in the user’s configuration database.
2 records
LibreOffice supports the storage of passwords for web connections in the user’s configuration database.
An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and issuer string of the used certificate wi…