CVE-2021-43444

The CVE-2021-43444 entry concerns ONLYOFFICE: all versions as of 2021-11-08 are affected by Incorrect Access Control due to a weak default URL signing key, enabling forging of signed document download URLs. This is the underlying cause described in the connected records, with a high impact on int...

CVE-2021-41830

It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advisory...