CVE-2023-6186

2023-12-1112:15:07

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-6186

document foundation

libreoffice

macro permission

validation

hyperlinks

built-in macros

security vulnerability

unix

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.8%

JSON

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user.

OSVersionArchitecturePackageVersionFilename
Debian12alllibreoffice< 4:7.4.7-1+deb12u1libreoffice_4:7.4.7-1+deb12u1_all.deb
Debian11alllibreoffice< 1:7.0.4-4+deb11u8libreoffice_1:7.0.4-4+deb11u8_all.deb
Debian10alllibreoffice< 1:6.1.5-3+deb10u11libreoffice_1:6.1.5-3+deb10u11_all.deb
Debian999alllibreoffice< 4:7.6.4~rc1-1libreoffice_4:7.6.4~rc1-1_all.deb
Debian13alllibreoffice< 4:7.6.4~rc1-1libreoffice_4:7.6.4~rc1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libreoffice	< 4:7.4.7-1+deb12u1	libreoffice_4:7.4.7-1+deb12u1_all.deb
Debian	11	all	libreoffice	< 1:7.0.4-4+deb11u8	libreoffice_1:7.0.4-4+deb11u8_all.deb
Debian	10	all	libreoffice	< 1:6.1.5-3+deb10u11	libreoffice_1:6.1.5-3+deb10u11_all.deb
Debian	999	all	libreoffice	< 4:7.6.4~rc1-1	libreoffice_4:7.6.4~rc1-1_all.deb
Debian	13	all	libreoffice	< 4:7.6.4~rc1-1	libreoffice_4:7.6.4~rc1-1_all.deb