Lucene search

[email protected]CVE-2023-1183

HistoryJul 10, 2023 - 4:15 p.m.

CVE-2023-1183

2023-07-1016:15:48

CWE-22

CWE-20

[email protected]

web.nvd.nist.gov

167

cve-2023-1183

libreoffice

security flaw

file writing vulnerability

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

5.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.4%

JSON

A flaw was found in the Libreoffice package. An attacker can craft an odb containing a “database/script” file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.

Affected configurations

NVD

Node

libreofficelibreofficeRange<7.4.6

libreofficelibreofficeMatch7.5.0

Node

fedoraprojectfedoraMatch38

Node

redhatenterprise_linuxMatch8.0

redhatenterprise_linuxMatch9.0

CPENameOperatorVersion
libreoffice:libreofficelibreofficelt7.4.6
libreoffice:libreofficelibreofficeeq7.5.0

CPE	Name	Operator	Version
libreoffice:libreoffice	libreoffice	lt	7.4.6
libreoffice:libreoffice	libreoffice	eq	7.5.0

CNA Affected

[
  {
    "product": "libreoffice",
    "vendor": "n/a",
    "versions": [
      {
        "version": "7.4.6",
        "status": "unaffected"
      },
      {
        "version": "7.5.1",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libreoffice",
    "defaultStatus": "unknown",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libreoffice",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libreoffice",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "libreoffice",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "product": "Fedora",
    "vendor": "Fedora",
    "collectionURL": "https://packages.fedoraproject.org/",
    "packageName": "libreoffice",
    "defaultStatus": "affected"
  }
]