Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:12736
HistoryJan 15, 2019 - 9:21 a.m.

Arbitrary File Read

2019-01-1509:21:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.593 Medium

EPSS

Percentile

97.8%

libreoffice is vulnerable to arbitrary file read attacks. The vulnerability exists as LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.