SecBoard
Zurück zur CVE-Übersicht

CVE-2026-90631

LOW(3.3)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Risk Signal Score13/100 — NIEDRIG

Erwähnungen (letzte 60 Tage)

Artikel

EPSS-Score

0.2%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

3.3

Technische Schwere

Beschreibung

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt, possibly transferring the contents of environment variables in the process. This issue affects Apache OpenOffice: through 4.1.16. Users are recommended to upgrade to version 4.1.17, which fixes the issue.

Betroffene Produkte

  • cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*

Referenzen