CVE-2025-64403

High CVSS: 8.1

Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources". A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause such links
to be loaded without prompt.

This issue affects Apache OpenOffice: through 4.1.15.

Users are recommended to upgrade to version 4.1.16, which fixes the issue.

Vendor

Apache

Product

Openoffice

CWE

CWE-862

Yayın Tarihi

2025-11-12 09:15:41

Güncelleme

2025-11-13 15:08:42

Source Identifier

security@apache.org

KEV Date Added

Kategoriler

CWE-862 Openoffice HIGH Apache 2025

Referanslar

https://lists.apache.org/thread/t7c6jhvdb00xtgd9vvn7h5sq9f4h5trt https://www.openoffice.org/security/cves/CVE-2025-64403.html http://www.openwall.com/lists/oss-security/2025/11/11/6

Benzer Kayıtlar

High

CVE-2025-65114

Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffic Se…

High

CVE-2025-58136

A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from…

Medium

CVE-2026-32794

Improper Certificate Validation vulnerability in Apache Airflow Provider for Databricks. Provider code did not validate…

Low

CVE-2026-32642

Incorrect Authorization (CWE-863) vulnerability in Apache Artemis, Apache ActiveMQ Artemis exists when an application us…

Medium

CVE-2026-26929

Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filterin…

Medium

CVE-2026-28563

Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filt…