REDHAT-BUG-2210185: Medium severity libreoffice draw vulnerability
Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.7; 7.5 versions prior to 7.5.3.
https://www.libreoffice.org/about-us/security/advisories/CVE-2023-2255
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2210185?
The severity of REDHAT-BUG-2210185 is classified as high due to the improper access control that allows external links to be loaded without user prompt.
Which versions of LibreOffice are affected by REDHAT-BUG-2210185?
REDHAT-BUG-2210185 affects LibreOffice versions prior to 7.4.7 and 7.5.3.
How do I fix REDHAT-BUG-2210185?
To fix REDHAT-BUG-2210185, update LibreOffice to the latest version that is 7.4.7 or later, or 7.5.3 or later.
What is the impact of REDHAT-BUG-2210185?
The impact of REDHAT-BUG-2210185 is that an attacker can craft documents that automatically load external content without user consent, potentially leading to data exposure.
Is there a workaround for REDHAT-BUG-2210185?
A workaround for REDHAT-BUG-2210185 is to avoid opening documents from untrusted sources or to disable the loading of external links in document settings if possible.