Vulnerability · Published Dec 11, 2023 · Assigned by Document Fdn.

CVE-2023-6186Link targets allow arbitrary script execution

High 8.3

In plain English

A high-severity security flaw in LibreOffice from The Document Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.8%top 44.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8autocorr-af1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-af1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-af1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-bg1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-bg1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-bg1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-ca1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-ca1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-ca1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-cs1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-cs1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-cs1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-da1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-da1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-da1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-de1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-de1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-de1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-dsb1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-dsb1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-el1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-el1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-en1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-en1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-en1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-es1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-es1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-es1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-fa1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-fa1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-fa1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-fi1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-fi1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-fi1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-fr1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-fr1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-fr1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-ga1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-ga1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-ga1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-hr1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-hr1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-hr1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-hsb1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-hsb1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-hu1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-hu1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-hu1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-is1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-is1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-is1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-it1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-it1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-it1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-ja1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-ja1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-ja1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-ko1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-ko1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-ko1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-lb1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-lb1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-lb1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-lt1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-lt1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-lt1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-mn1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-mn1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-mn1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-nl1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-nl1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-nl1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-pl1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-pl1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-pl1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-pt1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-pt1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-pt1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-ro1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-ro1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-ro1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-ru1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-ru1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-ru1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-sk1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-sk1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-sk1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8autocorr-sl1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-sl1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-sl1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-sr1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-sr1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-sr1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-sv1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-sv1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-sv1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-tr1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-tr1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-tr1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-vi1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-vi1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-vi1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9autocorr-vro1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-vro1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8autocorr-zh1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9autocorr-zh1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9autocorr-zh1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-base1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-base1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-base1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-calc1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-calc1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-calc1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-core1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-core1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-core1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-data1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-data1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-data1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-draw1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-draw1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-draw1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-emailmerge1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-emailmerge1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-emailmerge1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-filters1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-filters1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-filters1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-gdb-debug-support1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-gdb-debug-support1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-gdb-debug-support1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-graphicfilter1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-graphicfilter1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-graphicfilter1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-gtk31:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-gtk31:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-gtk31:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-ar1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-ar1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-ar1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-bg1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-bg1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-bg1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-bn1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-bn1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-bn1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-ca1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-ca1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-ca1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-cs1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-cs1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-cs1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-da1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-da1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-da1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-de1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-de1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-de1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-dz1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-dz1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-dz1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-el1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-el1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-el1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-en1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-en1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-en1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-help-eo1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-eo1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-es1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-es1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-es1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-et1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-et1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-et1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-eu1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-eu1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-eu1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-fi1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-fi1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-help-fi1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-help-fr1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-fr1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-fr1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-gl1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-gl1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:9libreoffice-help-gl1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:8libreoffice-help-gu1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-gu1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-gu1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-he1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-he1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-he1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-hi1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514
AlmaLinux:9libreoffice-help-hi1:7.1.8.1-12.el9_3.almaALSA-2024:1427
AlmaLinux:9libreoffice-help-hi1:7.1.8.1-12.el9_4.alma.1ALSA-2024:3835
AlmaLinux:8libreoffice-help-hr1:6.4.7.2-16.el8_9.alma.1ALSA-2024:1514

Affected products (as reported)

VendorProductVersions
The Document Foundation LibreOffice 7.5 – before 7.5.97.6 – before 7.6.4

References