CVE-2023-2255

Katalog CVE

CVSS 5.3 · Medium EPSS 2,2%

Kerentanan Permissions, Privileges, and Access Controls pada libreoffice, debian linux. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.7; 7.5 versions prior to 7.5.3.

Rincian

Terbit di NVD

25 Mei 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-264: Permissions, Privileges, and Access Controls

EPSS (30 hari)

2,2% peluang dieksploitasi; lebih tinggi dari 82,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.libreoffice.org/about-us/security/advisories/CVE-2023-2255 advisory vendor
• https://www.debian.org/security/2023/dsa-5415 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/08/msg00014.html
• https://security.gentoo.org/glsa/202311-15