CVE-2026-90631: Apache Software Foundation Apache OpenOffice

Описание

Оригинално описание

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt, possibly transferring the contents of environment variables in the process. This issue affects Apache OpenOffice: through 4.1.16. Users are recommended to upgrade to version 4.1.17, which fixes the issue.

Засегнати продукти

• Apache Software Foundation Apache OpenOffice: до 4.1.16

Вид слабост

• CWE-939 Improper Authorization in Handler for Custom URL Scheme

История

Други уязвимости в Apache Software Foundation Apache OpenOffice

• 5.8CVE-2026-59267
• CVE-2026-90632
• CVE-2026-90634
• CVE-2026-90629
• CVE-2026-90628

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-90631
• https://nvd.nist.gov/vuln/detail/CVE-2026-90631
• https://lists.apache.org/thread.html/j19rrk8jwrlg41tj6rfdcccj8cyyxhz9