CVE-2024-3044

Katalog CVE

CVSS 6.5 · Medium EPSS 1,0%

Kerentanan Product UI does not Warn User of Unsafe Actions pada libreoffice, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a document which without prompt will execute scripts built-into LibreOffice on clicking a graphic. Such scripts were previously deemed trusted but are now deemed untrusted.

Rincian

Terbit di NVD

14 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-356: Product UI does not Warn User of Unsafe Actions
CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 62,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.libreoffice.org/about-us/security/advisories/CVE-2024-3044 advisory vendor
• https://lists.debian.org/debian-lts-announce/2024/05/msg00016.html mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3TU3TYDXICKPYHM... mailing list · advisory pihak ketiga