| Package | Affected versions | Patched versions |
|---|---|---|
| libreoffice | ≥ 6.1.0, < 6.1.3< 6.0.7 | 6.1.36.0.7 |
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free