CVE-2023-6186 — Link targets allow arbitrary script execution
Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice …
Published: 2023-12-11 · CVSS: 8.3 · CVSS 3.1
Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning. In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7