KLA48688 RCE vulnerability in LibreOffice

Remote code execution vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to execute arbitrary code.

Original advisories

Empty entry in Java class path risks arbitrary code execution

Related products

LibreOffice

CVE list

CVE-2022-38745 critical

Solution

Update to the latest version

Download LibreOffice

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• LibreOffice earlier than 7.2.6LibreOffice 7.3.x earlier than 7.3.1