CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0CVE-2023-1183 – Arbitrary file write
https://notcve.org/view.php?id=CVE-2023-1183
22 Jun 2023 — A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker. Gregor Kopf of Secfault Security GmbH discovered that HSQLDB, a Java SQL database engine, allowed the execution of spurious scripting commands in .script and .log files. Hsqldb supports a "SCRIPT" keyword which is normally used to record the commands input by the databas... • http://www.openwall.com/lists/oss-security/2023/12/28/4 • CWE-20: Improper Input Validation CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.0EPSS: 0%CPEs: 3EXPL: 0CVE-2022-26307 – Weak Master Keys
https://notcve.org/view.php?id=CVE-2022-26307
25 Jul 2022 — LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 to 43 bits making the stored passwords vulerable to a brute force attack if an attacker has access to the users stored config. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 ... • http://www.openwall.com/lists/oss-security/2022/08/13/2 • CWE-326: Inadequate Encryption Strength •
CVSS: 7.6EPSS: 0%CPEs: 2EXPL: 0CVE-2022-26305 – Execution of Untrusted Macros Due to Improper Certificate Validation
https://notcve.org/view.php?id=CVE-2022-26305
25 Jul 2022 — An Improper Certificate Validation vulnerability in LibreOffice existed where determining if a macro was signed by a trusted author was done by only matching the serial number and issuer string of the used certificate with that of a trusted certificate. This is not sufficient to verify that the macro was actually signed with the certificate. An adversary could therefore create an arbitrary certificate with a serial number and an issuer string identical to a trusted certificate which LibreOffice would presen... • https://lists.debian.org/debian-lts-announce/2023/03/msg00022.html • CWE-295: Improper Certificate Validation •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2022-26306 – Execution of Untrusted Macros Due to Improper Certificate Validation
https://notcve.org/view.php?id=CVE-2022-26306
25 Jul 2022 — LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in LibreOffice existed where the required initialization vector for encryption was always the same which weakens the security of the encryption making them vulnerable if an attacker has access to the user's configuration data. This issue affects: The Document Foundation LibreOffice 7.2 versions prior to 7.2.7; 7.3 ver... • http://www.openwall.com/lists/oss-security/2022/08/13/1 • CWE-326: Inadequate Encryption Strength CWE-330: Use of Insufficiently Random Values •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-25636 – Incorrect trust validation of signature with ambiguous KeyInfo children
https://notcve.org/view.php?id=CVE-2021-25636
22 Feb 2022 — LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to create a digitally signed ODF document, by manipulating the documentsignatures.xml or macrosignatures.xml stream within the document to contain both "X509Data" and "KeyValue" children of the "KeyInfo" tag, which when... • https://lists.debian.org/debian-lts-announce/2023/03/msg00022.html • CWE-295: Improper Certificate Validation CWE-347: Improper Verification of Cryptographic Signature •