VYPR
Unrated severityNVD Advisory· Published Dec 11, 2023· Updated Feb 13, 2025

Link targets allow arbitrary script execution

CVE-2023-6186

Description

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning.

In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user.

Affected products

189

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.