Published: 08/06/2020 Updated: 31/12/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where remote graphic links loaded from docx documents were omitted from this protection prior to version 6.4.4. This issue affects: The Document Foundation LibreOffice versions before 6.4.4.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libreoffice libreoffice
fedoraproject fedora 31
opensuse leap 15.1
opensuse leap 15.2

Synopsis Low: libreoffice security, bug fix, and enhancement update Type/Severity Security Advisory: Low Topic An update for libreoffice, libcmis, and liborcus is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Low A Common Vulnerab ...

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document A flaw existed where remote graphic links loaded from docx document ...

NVD-CWE-Other https://www.libreoffice.org/about-us/security/advisories/CVE-2020-12802 http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00042.html http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00058.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQIBAKXD7VO5IGBD7ZMH3GGBNR5R2IOA/https://lists.debian.org/debian-lts-announce/2023/12/msg00026.html https://access.redhat.com/errata/RHSA-2020:4628 https://nvd.nist.gov https://security.archlinux.org/CVE-2020-12802

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-12802

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect