Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice.
URLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links.
This issue affects LibreOffice: from 24.8 before < 24.8.4.
CVSS Details
- CVSS 4.0 Base Score: 6.7 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-autocorr-afamazon-linux-ami-2-upgrade-autocorr-bgamazon-linux-ami-2-upgrade-autocorr-caamazon-linux-ami-2-upgrade-autocorr-csamazon-linux-ami-2-upgrade-autocorr-daamazon-linux-ami-2-upgrade-autocorr-deamazon-linux-ami-2-upgrade-autocorr-enamazon-linux-ami-2-upgrade-autocorr-esamazon-linux-ami-2-upgrade-autocorr-faamazon-linux-ami-2-upgrade-autocorr-fiamazon-linux-ami-2-upgrade-autocorr-framazon-linux-ami-2-upgrade-autocorr-gaamazon-linux-ami-2-upgrade-autocorr-hramazon-linux-ami-2-upgrade-autocorr-huamazon-linux-ami-2-upgrade-autocorr-isamazon-linux-ami-2-upgrade-autocorr-itamazon-linux-ami-2-upgrade-autocorr-jaamazon-linux-ami-2-upgrade-autocorr-koamazon-linux-ami-2-upgrade-autocorr-lbamazon-linux-ami-2-upgrade-autocorr-ltamazon-linux-ami-2-upgrade-autocorr-mnamazon-linux-ami-2-upgrade-autocorr-nlamazon-linux-ami-2-upgrade-autocorr-plamazon-linux-ami-2-upgrade-autocorr-ptamazon-linux-ami-2-upgrade-autocorr-roamazon-linux-ami-2-upgrade-autocorr-ruamazon-linux-ami-2-upgrade-autocorr-skamazon-linux-ami-2-upgrade-autocorr-slamazon-linux-ami-2-upgrade-autocorr-sramazon-linux-ami-2-upgrade-autocorr-svamazon-linux-ami-2-upgrade-autocorr-tramazon-linux-ami-2-upgrade-autocorr-viamazon-linux-ami-2-upgrade-autocorr-zhamazon-linux-ami-2-upgrade-libreofficeamazon-linux-ami-2-upgrade-libreoffice-baseamazon-linux-ami-2-upgrade-libreoffice-bshamazon-linux-ami-2-upgrade-libreoffice-calcamazon-linux-ami-2-upgrade-libreoffice-coreamazon-linux-ami-2-upgrade-libreoffice-dataamazon-linux-ami-2-upgrade-libreoffice-debuginfoamazon-linux-ami-2-upgrade-libreoffice-drawamazon-linux-ami-2-upgrade-libreoffice-emailmergeamazon-linux-ami-2-upgrade-libreoffice-filtersamazon-linux-ami-2-upgrade-libreoffice-gdb-debug-supportamazon-linux-ami-2-upgrade-libreoffice-gladeamazon-linux-ami-2-upgrade-libreoffice-graphicfilteramazon-linux-ami-2-upgrade-libreoffice-gtk2amazon-linux-ami-2-upgrade-libreoffice-gtk3amazon-linux-ami-2-upgrade-libreoffice-help-aramazon-linux-ami-2-upgrade-libreoffice-help-bgamazon-linux-ami-2-upgrade-libreoffice-help-bnamazon-linux-ami-2-upgrade-libreoffice-help-caamazon-linux-ami-2-upgrade-libreoffice-help-csamazon-linux-ami-2-upgrade-libreoffice-help-daamazon-linux-ami-2-upgrade-libreoffice-help-deamazon-linux-ami-2-upgrade-libreoffice-help-dzamazon-linux-ami-2-upgrade-libreoffice-help-elamazon-linux-ami-2-upgrade-libreoffice-help-esamazon-linux-ami-2-upgrade-libreoffice-help-etamazon-linux-ami-2-upgrade-libreoffice-help-euamazon-linux-ami-2-upgrade-libreoffice-help-framazon-linux-ami-2-upgrade-libreoffice-help-glamazon-linux-ami-2-upgrade-libreoffice-help-guamazon-linux-ami-2-upgrade-libreoffice-help-hiamazon-linux-ami-2-upgrade-libreoffice-help-hramazon-linux-ami-2-upgrade-libreoffice-help-huamazon-linux-ami-2-upgrade-libreoffice-help-idamazon-linux-ami-2-upgrade-libreoffice-help-itamazon-linux-ami-2-upgrade-libreoffice-help-jaamazon-linux-ami-2-upgrade-libreoffice-help-koamazon-linux-ami-2-upgrade-libreoffice-help-ltamazon-linux-ami-2-upgrade-libreoffice-help-lvamazon-linux-ami-2-upgrade-libreoffice-help-nbamazon-linux-ami-2-upgrade-libreoffice-help-nlamazon-linux-ami-2-upgrade-libreoffice-help-nnamazon-linux-ami-2-upgrade-libreoffice-help-plamazon-linux-ami-2-upgrade-libreoffice-help-pt-bramazon-linux-ami-2-upgrade-libreoffice-help-pt-ptamazon-linux-ami-2-upgrade-libreoffice-help-roamazon-linux-ami-2-upgrade-libreoffice-help-ruamazon-linux-ami-2-upgrade-libreoffice-help-siamazon-linux-ami-2-upgrade-libreoffice-help-skamazon-linux-ami-2-upgrade-libreoffice-help-slamazon-linux-ami-2-upgrade-libreoffice-help-svamazon-linux-ami-2-upgrade-libreoffice-help-taamazon-linux-ami-2-upgrade-libreoffice-help-tramazon-linux-ami-2-upgrade-libreoffice-help-ukamazon-linux-ami-2-upgrade-libreoffice-help-zh-hansamazon-linux-ami-2-upgrade-libreoffice-help-zh-hantamazon-linux-ami-2-upgrade-libreoffice-impressamazon-linux-ami-2-upgrade-libreoffice-langpack-afamazon-linux-ami-2-upgrade-libreoffice-langpack-aramazon-linux-ami-2-upgrade-libreoffice-langpack-asamazon-linux-ami-2-upgrade-libreoffice-langpack-bgamazon-linux-ami-2-upgrade-libreoffice-langpack-bnamazon-linux-ami-2-upgrade-libreoffice-langpack-bramazon-linux-ami-2-upgrade-libreoffice-langpack-caamazon-linux-ami-2-upgrade-libreoffice-langpack-csamazon-linux-ami-2-upgrade-libreoffice-langpack-cyamazon-linux-ami-2-upgrade-libreoffice-langpack-daamazon-linux-ami-2-upgrade-libreoffice-langpack-deamazon-linux-ami-2-upgrade-libreoffice-langpack-dzamazon-linux-ami-2-upgrade-libreoffice-langpack-elamazon-linux-ami-2-upgrade-libreoffice-langpack-enamazon-linux-ami-2-upgrade-libreoffice-langpack-esamazon-linux-ami-2-upgrade-libreoffice-langpack-etamazon-linux-ami-2-upgrade-libreoffice-langpack-euamazon-linux-ami-2-upgrade-libreoffice-langpack-faamazon-linux-ami-2-upgrade-libreoffice-langpack-framazon-linux-ami-2-upgrade-libreoffice-langpack-gaamazon-linux-ami-2-upgrade-libreoffice-langpack-glamazon-linux-ami-2-upgrade-libreoffice-langpack-guamazon-linux-ami-2-upgrade-libreoffice-langpack-hiamazon-linux-ami-2-upgrade-libreoffice-langpack-hramazon-linux-ami-2-upgrade-libreoffice-langpack-huamazon-linux-ami-2-upgrade-libreoffice-langpack-idamazon-linux-ami-2-upgrade-libreoffice-langpack-itamazon-linux-ami-2-upgrade-libreoffice-langpack-jaamazon-linux-ami-2-upgrade-libreoffice-langpack-kkamazon-linux-ami-2-upgrade-libreoffice-langpack-knamazon-linux-ami-2-upgrade-libreoffice-langpack-koamazon-linux-ami-2-upgrade-libreoffice-langpack-ltamazon-linux-ami-2-upgrade-libreoffice-langpack-lvamazon-linux-ami-2-upgrade-libreoffice-langpack-maiamazon-linux-ami-2-upgrade-libreoffice-langpack-mlamazon-linux-ami-2-upgrade-libreoffice-langpack-mramazon-linux-ami-2-upgrade-libreoffice-langpack-nbamazon-linux-ami-2-upgrade-libreoffice-langpack-nlamazon-linux-ami-2-upgrade-libreoffice-langpack-nnamazon-linux-ami-2-upgrade-libreoffice-langpack-nramazon-linux-ami-2-upgrade-libreoffice-langpack-nsoamazon-linux-ami-2-upgrade-libreoffice-langpack-oramazon-linux-ami-2-upgrade-libreoffice-langpack-paamazon-linux-ami-2-upgrade-libreoffice-langpack-plamazon-linux-ami-2-upgrade-libreoffice-langpack-pt-bramazon-linux-ami-2-upgrade-libreoffice-langpack-pt-ptamazon-linux-ami-2-upgrade-libreoffice-langpack-roamazon-linux-ami-2-upgrade-libreoffice-langpack-ruamazon-linux-ami-2-upgrade-libreoffice-langpack-siamazon-linux-ami-2-upgrade-libreoffice-langpack-skamazon-linux-ami-2-upgrade-libreoffice-langpack-slamazon-linux-ami-2-upgrade-libreoffice-langpack-sramazon-linux-ami-2-upgrade-libreoffice-langpack-ssamazon-linux-ami-2-upgrade-libreoffice-langpack-stamazon-linux-ami-2-upgrade-libreoffice-langpack-svamazon-linux-ami-2-upgrade-libreoffice-langpack-taamazon-linux-ami-2-upgrade-libreoffice-langpack-teamazon-linux-ami-2-upgrade-libreoffice-langpack-thamazon-linux-ami-2-upgrade-libreoffice-langpack-tnamazon-linux-ami-2-upgrade-libreoffice-langpack-tramazon-linux-ami-2-upgrade-libreoffice-langpack-tsamazon-linux-ami-2-upgrade-libreoffice-langpack-ukamazon-linux-ami-2-upgrade-libreoffice-langpack-veamazon-linux-ami-2-upgrade-libreoffice-langpack-xhamazon-linux-ami-2-upgrade-libreoffice-langpack-zh-hansamazon-linux-ami-2-upgrade-libreoffice-langpack-zh-hantamazon-linux-ami-2-upgrade-libreoffice-langpack-zuamazon-linux-ami-2-upgrade-libreoffice-librelogoamazon-linux-ami-2-upgrade-libreoffice-mathamazon-linux-ami-2-upgrade-libreoffice-nlpsolveramazon-linux-ami-2-upgrade-libreoffice-officebeanamazon-linux-ami-2-upgrade-libreoffice-officebean-commonamazon-linux-ami-2-upgrade-libreoffice-ogltransamazon-linux-ami-2-upgrade-libreoffice-opensymbol-fontsamazon-linux-ami-2-upgrade-libreoffice-pdfimportamazon-linux-ami-2-upgrade-libreoffice-postgresqlamazon-linux-ami-2-upgrade-libreoffice-pyunoamazon-linux-ami-2-upgrade-libreoffice-rhinoamazon-linux-ami-2-upgrade-libreoffice-sdkamazon-linux-ami-2-upgrade-libreoffice-sdk-docamazon-linux-ami-2-upgrade-libreoffice-ureamazon-linux-ami-2-upgrade-libreoffice-ure-commonamazon-linux-ami-2-upgrade-libreoffice-wiki-publisheramazon-linux-ami-2-upgrade-libreoffice-writeramazon-linux-ami-2-upgrade-libreoffice-x11amazon-linux-ami-2-upgrade-libreoffice-xsltfilteramazon-linux-ami-2-upgrade-libreofficekitamazon-linux-ami-2-upgrade-libreofficekit-devel | Apr 30, 2025 | Jan 7, 2025 | |
| Debian | debian-upgrade-libreoffice | Jan 20, 2025 | Jan 7, 2025 | |
| Gentoo Linux | gentoo-linux-upgrade-app-office-libreofficegentoo-linux-upgrade-app-office-libreoffice-bin | Jun 13, 2025 | Jan 7, 2025 | |
| Ubuntu | ubuntu-upgrade-libreoffice | Jan 30, 2025 | Jan 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub