Vulnerability · Published Mar 4, 2025 · Assigned by Document Fdn.

CVE-2025-1080Macro URL arbitrary script execution

High 7.2

In plain English

A high-severity improper input validation in LibreOffice from The Document Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)7.2High
Exploit odds (30 days)0.3%top 76.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with an embedded inner URL that when passed to LibreOffice could call internal macros with arbitrary arguments. This issue affects LibreOffice: from 24.8 before < 24.8.5, from 25.2 before < 25.2.1.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8autocorr-af1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-bg1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-ca1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-cs1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-da1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-de1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-en1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-es1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-fa1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-fi1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-fr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-ga1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-hr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-hu1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-is1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-it1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-ja1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-ko1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-lb1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-lt1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-mn1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-nl1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-pl1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-pt1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-ro1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-ru1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-sk1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-sl1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-sr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-sv1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-tr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-vi1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8autocorr-zh1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-base1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-calc1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-core1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-data1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-draw1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-emailmerge1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-filters1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-gdb-debug-support1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-graphicfilter1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-gtk31:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-ar1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-bg1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-bn1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-ca1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-cs1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-da1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-de1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-dz1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-el1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-en1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-es1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-et1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-eu1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-fi1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-fr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-gl1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-gu1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-he1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-hi1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-hr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-hu1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-id1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-it1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-ja1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-ko1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-lt1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-lv1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-nb1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-nl1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-nn1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-pl1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-pt-BR1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-pt-PT1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-ro1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-ru1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-si1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-sk1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-sl1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-sv1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-ta1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-tr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-uk1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-zh-Hans1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-help-zh-Hant1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-impress1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-af1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-ar1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-as1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-bg1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-bn1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-br1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-ca1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-cs1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-cy1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-da1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-de1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-dz1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-el1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-en1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-es1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-et1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-eu1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-fa1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-fi1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-fr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-ga1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-gl1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-gu1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-he1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-hi1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-hr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-hu1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-id1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-it1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-ja1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-kk1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-kn1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-ko1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-lt1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-lv1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-mai1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-ml1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-mr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-nb1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-nl1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-nn1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-nr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-nso1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-or1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-pa1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-pl1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-pt-BR1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-pt-PT1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-ro1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-ru1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-si1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-sk1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-sl1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-sr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-ss1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-st1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-sv1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-ta1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-te1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-th1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-tn1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-tr1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-ts1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-uk1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-ve1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-xh1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-zh-Hans1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-zh-Hant1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-langpack-zu1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-math1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-ogltrans1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-opensymbol-fonts1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-pdfimport1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-pyuno1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-sdk1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-sdk-doc1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-ure1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-ure-common1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-wiki-publisher1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-writer1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-x111:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreoffice-xsltfilter1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
AlmaLinux:8libreofficekit1:6.4.7.2-19.el8_10.alma.1ALSA-2025:2868
Debian:12libreoffice4:7.4.7-1+deb12u7DEBIAN-CVE-2025-1080
Debian:12libreoffice4:7.4.7-1+deb12u7DSA-5873-1
Debian:13libreoffice4:24.8.5-1DEBIAN-CVE-2025-1080
Debian:14libreoffice4:24.8.5-1DEBIAN-CVE-2025-1080
Rocky Linux:8libreoffice1:6.4.7.2-19.el8_10RLSA-2025:2868
Rocky Linux:9libreoffice1:7.1.8.1-15.el9_5RLSA-2025:3408
Ubuntu:22.04:LTSlibreoffice1:7.3.7-0ubuntu0.22.04.9USN-7337-1
Ubuntu:22.04:LTSlibreoffice1:7.3.7-0ubuntu0.22.04.9UBUNTU-CVE-2025-1080
Ubuntu:24.04:LTSlibreoffice4:24.2.7-0ubuntu0.24.04.3USN-7337-1
Ubuntu:24.04:LTSlibreoffice4:24.2.7-0ubuntu0.24.04.3UBUNTU-CVE-2025-1080

Affected products (as reported)

VendorProductVersions
The Document Foundation LibreOffice 24.8 – before < 24.8.525.2 – before < 25.2.1

Weakness: CWE-20 · Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:L/VA:H/SC:H/SI:H/SA:H

References