Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice.
URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links.
This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVSS Details
- CVSS 4.0 Base Score: 6.7 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libreoffice-help-elUpgrade libreoffice-langpack-bnUpgrade libreoffice-langpack-svUpgrade autocorr-zhUpgrade libreoffice-langpack-teUpgrade libreoffice-langpack-gaUpgrade libreoffice-langpack-stUpgrade autocorr-trUpgrade libreoffice-langpack-lvUpgrade libreoffice-gtk2Upgrade autocorr-viUpgrade libreoffice-help-zh-HansUpgrade libreoffice-langpack-koUpgrade libreoffice-opensymbol-fontsUpgrade libreoffice-langpack-orUpgrade autocorr-afUpgrade libreoffice-help-svUpgrade libreoffice-gtk3Upgrade libreoffice-impressUpgrade libreoffice-langpack-idUpgrade libreoffice-langpack-mlUpgrade libreoffice-langpack-siUpgrade libreoffice-help-itUpgrade libreoffice-langpack-zh-HansUpgrade libreoffice-help-frUpgrade libreoffice-langpack-dzUpgrade autocorr-ruUpgrade autocorr-slUpgrade libreoffice-langpack-xhUpgrade libreoffice-librelogoUpgrade libreoffice-sdk-docUpgrade libreoffice-langpack-zh-HantUpgrade libreoffice-gdb-debug-supportUpgrade libreoffice-help-trUpgrade autocorr-csUpgrade autocorr-deUpgrade libreoffice-langpack-thUpgrade libreofficekitUpgrade autocorr-roUpgrade autocorr-svUpgrade autocorr-hrUpgrade libreoffice-filtersUpgrade autocorr-itUpgrade autocorr-koUpgrade libreoffice-mathUpgrade libreoffice-help-hrUpgrade libreoffice-help-glUpgrade libreoffice-langpack-ukUpgrade libreoffice-help-slUpgrade libreoffice-help-nbUpgrade libreoffice-langpack-pt-PTUpgrade libreoffice-langpack-hiUpgrade libreoffice-langpack-nlUpgrade libreoffice-ogltransUpgrade libreoffice-help-siUpgrade libreoffice-help-huUpgrade libreoffice-langpack-taUpgrade libreofficeUpgrade autocorr-frUpgrade libreoffice-coreUpgrade libreoffice-help-arUpgrade libreoffice-help-lvUpgrade libreoffice-help-bgUpgrade libreoffice-langpack-pt-BRUpgrade libreoffice-langpack-faUpgrade libreoffice-langpack-daUpgrade autocorr-esUpgrade autocorr-isUpgrade libreoffice-langpack-paUpgrade libreoffice-help-ukUpgrade autocorr-ltUpgrade libreoffice-langpack-asUpgrade libreoffice-ureUpgrade libreoffice-langpack-srUpgrade libreoffice-langpack-cyUpgrade libreoffice-langpack-huUpgrade autocorr-lbUpgrade libreoffice-langpack-guUpgrade libreoffice-help-idUpgrade libreoffice-gladeUpgrade libreoffice-emailmergeUpgrade libreoffice-langpack-kkUpgrade libreoffice-drawUpgrade libreoffice-langpack-veUpgrade libreoffice-langpack-arUpgrade autocorr-srUpgrade libreoffice-help-ruUpgrade libreoffice-help-esUpgrade libreoffice-langpack-maiUpgrade libreoffice-langpack-ltUpgrade libreoffice-writerUpgrade libreoffice-xsltfilterUpgrade libreoffice-sdkUpgrade libreoffice-langpack-trUpgrade libreoffice-help-skUpgrade libreoffice-langpack-glUpgrade libreoffice-help-euUpgrade libreoffice-help-deUpgrade libreoffice-pdfimportUpgrade libreoffice-help-daUpgrade libreoffice-officebeanUpgrade libreoffice-help-bnUpgrade libreoffice-x11Upgrade libreoffice-langpack-tnUpgrade libreoffice-langpack-skUpgrade libreoffice-langpack-hrUpgrade libreoffice-langpack-roUpgrade libreoffice-langpack-brUpgrade libreoffice-help-dzUpgrade libreoffice-langpack-nrUpgrade libreoffice-langpack-plUpgrade libreoffice-help-taUpgrade autocorr-caUpgrade libreoffice-langpack-frUpgrade libreoffice-langpack-slUpgrade libreoffice-help-nnUpgrade libreoffice-calcUpgrade autocorr-jaUpgrade libreoffice-help-pt-BRUpgrade autocorr-daUpgrade libreoffice-help-plUpgrade libreoffice-langpack-afUpgrade libreoffice-langpack-nnUpgrade libreoffice-langpack-bgUpgrade libreoffice-help-csUpgrade libreoffice-bshUpgrade libreoffice-baseUpgrade libreoffice-help-roUpgrade libreoffice-help-etUpgrade libreoffice-langpack-euUpgrade autocorr-ptUpgrade libreoffice-postgresqlUpgrade libreoffice-langpack-nbUpgrade libreoffice-help-caUpgrade autocorr-bgUpgrade libreoffice-langpack-tsUpgrade libreoffice-langpack-jaUpgrade libreoffice-langpack-caUpgrade autocorr-huUpgrade libreofficekit-develUpgrade autocorr-skUpgrade libreoffice-langpack-etUpgrade autocorr-gaUpgrade libreoffice-ure-commonUpgrade libreoffice-nlpsolverUpgrade libreoffice-rhinoUpgrade autocorr-enUpgrade libreoffice-wiki-publisherUpgrade libreoffice-help-koUpgrade libreoffice-langpack-mrUpgrade autocorr-faUpgrade libreoffice-langpack-zuUpgrade libreoffice-help-guUpgrade libreoffice-help-jaUpgrade libreoffice-langpack-csUpgrade libreoffice-langpack-deUpgrade libreoffice-help-hiUpgrade libreoffice-help-nlUpgrade libreoffice-help-zh-HantUpgrade libreoffice-pyunoUpgrade libreoffice-langpack-ssUpgrade libreoffice-langpack-elUpgrade libreoffice-langpack-knUpgrade libreoffice-langpack-enUpgrade libreoffice-debuginfoUpgrade libreoffice-langpack-nsoUpgrade libreoffice-langpack-esUpgrade libreoffice-langpack-ruUpgrade libreoffice-help-pt-PTUpgrade libreoffice-dataUpgrade autocorr-plUpgrade autocorr-mnUpgrade autocorr-fiUpgrade libreoffice-langpack-itUpgrade autocorr-nlUpgrade libreoffice-help-ltUpgrade libreoffice-officebean-commonUpgrade libreoffice-graphicfilter | Apr 30, 2025 | Jan 7, 2025 |
| Debian | — | Upgrade libreoffice | Jan 20, 2025 | Jan 7, 2025 |
| Gentoo Linux | — | Upgrade app-office/libreoffice-bin.Upgrade app-office/libreoffice. | Jun 13, 2025 | Jan 7, 2025 |
| Ubuntu | — | Upgrade libreoffice | Jan 30, 2025 | Jan 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub