CVE-2023-6186high

CVE-2023-6186: falha de alta gravidade em The Document Foundation LibreOffice

Link targets allow arbitrary script execution

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar LibreOffice+ Monitorar libreoffice

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.3epss 0.8%
Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user.
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H
Produtos afetados
The Document Foundation · LibreOffice
CVEs relacionadas — The Document Foundation LibreOffice

No mesmo produto, das mais perigosas para as menos.

CVE-2022-3140—Macro URL arbitrary script executionEPSS 7.0%CVE-2021-25631—denylist of executable filename extensions possible to bypass under windowsEPSS 5.0%CVE-2023-2255—Remote documents loaded without prompt via IFrameEPSS 2.2%CVE-2020-12802—remote graphics contained in docx format retrieved in 'stealth mode'EPSS 2.0%CVE-2020-12803—XForms submissions could overwrite local filesEPSS 1.8%CVE-2022-26307—Weak Master KeysEPSS 1.5%