https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:00:54 +0000 https://cve.radiocsirt.org/vuln/alsa-2020:4628 <p><strong>Affected:</strong> AlmaLinux:8: libcmis, AlmaLinux:8: libreoffice-sdk, AlmaLinux:8: libreoffice-sdk-doc</p> <p>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.</p> <p>The following packages have been upgraded to a later upstream version: libreoffice (6.3.6.2), libcmis (0.5.2), liborcus (0.14.1). (BZ#1796893)</p> <p>Security Fix(es):</p> <p>* libreoffice: &#39;stealth mode&#39; remote resource restrictions bypass (CVE-2020-12802)</p> <p>* libreoffice: forms allowed to be submitted to any URI could result in local file overwrite (CVE-2020-12803)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libcmis, AlmaLinux:8: libreoffice-sdk, AlmaLinux:8: libreoffice-sdk-doc</p> <p>LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and extended office suite.</p> <p>The following packages have been upgraded to a later upstream version: libreoffice (6.3.6.2), libcmis (0.5.2), liborcus (0.14.1). (BZ#1796893)</p> <p>Security Fix(es):</p> <p>* libreoffice: &#39;stealth mode&#39; remote resource restrictions bypass (CVE-2020-12802)</p> <p>* libreoffice: forms allowed to be submitted to any URI could result in local file overwrite (CVE-2020-12803)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2020:4628 https://cve.radiocsirt.org/vuln/bdu:2020-03673 bdu:2020-03673 https://cve.radiocsirt.org/vuln/bdu:2020-03673 https://cve.radiocsirt.org/vuln/cnvd-2020-35943 cnvd-2020-35943 https://cve.radiocsirt.org/vuln/cnvd-2020-35943 https://cve.radiocsirt.org/vuln/euvd-2026-174130 EUVD-2026-174130 https://cve.radiocsirt.org/vuln/euvd-2026-174130 https://cve.radiocsirt.org/vuln/fkie_cve-2020-12803 <p>ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need for macros or other active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the form, but to avoid the possibility of malicious documents engineered to maximize the possibility of inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.</p> <p>ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need for macros or other active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the form, but to avoid the possibility of malicious documents engineered to maximize the possibility of inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-12803 https://cve.radiocsirt.org/vuln/ghsa-gxcj-pjgw-2hvw <p>ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need for macros or other active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the form, but to avoid the possibility of malicious documents engineered to maximize the possibility of inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.</p> <p>ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need for macros or other active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the form, but to avoid the possibility of malicious documents engineered to maximize the possibility of inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.</p> https://cve.radiocsirt.org/vuln/ghsa-gxcj-pjgw-2hvw https://cve.radiocsirt.org/vuln/gsd-2020-12803 gsd-2020-12803 https://cve.radiocsirt.org/vuln/gsd-2020-12803 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1222-1 <p>Security update for libreoffice</p> <p>Security update for libreoffice</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1222-1 https://cve.radiocsirt.org/vuln/rhsa-2020:4628 <p>libreoffice: &#39;stealth mode&#39; remote resource restrictions bypass libreoffice: forms allowed to be submitted to any URI could result in local file overwrite</p> <p>libreoffice: &#39;stealth mode&#39; remote resource restrictions bypass libreoffice: forms allowed to be submitted to any URI could result in local file overwrite</p> https://cve.radiocsirt.org/vuln/rhsa-2020:4628 https://cve.radiocsirt.org/vuln/suse-su-2020:2217-1 <p>Security update for libreoffice</p> <p>Security update for libreoffice</p> https://cve.radiocsirt.org/vuln/suse-su-2020:2217-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-12803 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libreoffice, Ubuntu:20.04:LTS: libreoffice</p> <p>ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need for macros or other active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the form, but to avoid the possibility of malicious documents engineered to maximize the possibility of inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: libreoffice, Ubuntu:20.04:LTS: libreoffice</p> <p>ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable forms, ODF implements the XForms W3C standard, which allows data to be submitted without the need for macros or other active scripting Prior to version 6.4.4 LibreOffice allowed forms to be submitted to any URI, including file: URIs, enabling form submissions to overwrite local files. User-interaction is required to submit the form, but to avoid the possibility of malicious documents engineered to maximize the possibility of inadvertent user submission this feature has now been limited to http[s] URIs, removing the possibility to overwrite local files. This issue affects: The Document Foundation LibreOffice versions prior to 6.4.4.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-12803 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1808 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in LibreOffice ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um Dateien zu überschreiben.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in LibreOffice ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um Dateien zu überschreiben.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1808