Vulnerability · Published Oct 11, 2022 · Assigned by Document Fdn.

CVE-2022-3140Macro URL arbitrary script execution

Medium 6.3

In plain English

A medium-severity improper input validation in LibreOffice from The Document Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 7.0% (higher than 94% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)6.3Medium
Exploit odds (30 days)7.0%top 5.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice links using that scheme could be constructed to call internal macros with arbitrary arguments. Which when clicked on, or activated by document events, could result in arbitrary script execution without warning. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.1; 7.3 versions prior to 7.3.6.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8autocorr-af1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-af1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-bg1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-bg1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-ca1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-ca1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-cs1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-cs1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-da1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-da1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-de1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-de1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:9autocorr-dsb1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:9autocorr-el1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-en1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-en1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-es1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-es1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-fa1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-fa1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-fi1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-fi1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-fr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-fr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-ga1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-ga1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-hr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-hr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:9autocorr-hsb1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-hu1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-hu1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-is1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-is1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-it1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-it1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-ja1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-ja1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-ko1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-ko1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-lb1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-lb1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-lt1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-lt1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-mn1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-mn1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-nl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-nl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-pl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-pl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-pt1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-pt1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-ro1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-ro1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-ru1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-ru1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-sk1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-sk1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-sl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-sl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-sr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-sr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-sv1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-sv1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-tr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-tr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-vi1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-vi1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:9autocorr-vro1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8autocorr-zh1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9autocorr-zh1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-base1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-base1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-calc1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-calc1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-core1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-core1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-data1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-data1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-draw1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-draw1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-emailmerge1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-emailmerge1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-filters1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-filters1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-gdb-debug-support1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-gdb-debug-support1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-graphicfilter1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-graphicfilter1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-gtk31:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-gtk31:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ar1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ar1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-bg1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-bg1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-bn1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-bn1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ca1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ca1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-cs1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-cs1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-da1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-da1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-de1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-de1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-dz1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-dz1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-el1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-el1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-en1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-en1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:9libreoffice-help-eo1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-es1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-es1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-et1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-et1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-eu1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-eu1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-fi1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-fi1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-fr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-fr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-gl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-gl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-gu1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-gu1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-he1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-he1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-hi1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-hi1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-hr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-hr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-hu1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-hu1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-id1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-id1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-it1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-it1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ja1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ja1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ko1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ko1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-lt1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-lt1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-lv1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-lv1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-nb1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-nb1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-nl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-nl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-nn1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-nn1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-pl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-pl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-pt-BR1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-pt-BR1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-pt-PT1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-pt-PT1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ro1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ro1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ru1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ru1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-si1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-si1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-sk1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-sk1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-sl1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-sl1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-sv1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-sv1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-ta1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-ta1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-tr1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-tr1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-uk1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-uk1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-zh-Hans1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-zh-Hans1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-help-zh-Hant1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-help-zh-Hant1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-impress1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-impress1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-af1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-af1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-ar1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-ar1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-as1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-as1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-bg1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-bg1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-bn1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-bn1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-br1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-br1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-ca1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-ca1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-cs1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-cs1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-cy1:6.4.7.2-12.el8_7.almaALSA-2023:0089
AlmaLinux:9libreoffice-langpack-cy1:7.1.8.1-8.el9_1.almaALSA-2023:0304
AlmaLinux:8libreoffice-langpack-da1:6.4.7.2-12.el8_7.almaALSA-2023:0089

Affected products (as reported)

VendorProductVersions
The Document Foundation LibreOffice 7.4 – before 7.4.17.3 – before 7.3.6

Weakness: CWE-20

References