CVE-2022-38745

Apache OpenOffice: Empty entry in Java class path

CVSS 7.8 HIGHEPSS 0.9%CWE-1188 CWE-427 CWE-94

Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Produtos afetados

Apache Software Foundation · Apache OpenOffice

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://lists.apache.org/thread/q3noq7m681kvtb29m28x74q8cnwnzzo0 https://www.openoffice.org/security/cves/CVE-2022-38745.html