CVE-2023-1183CWE-20
Arbitrary file write
Medium · published July 10, 2023
Patch now
High probability of exploitation
CVSS calls it medium at 5.0. It sits in the 99.2th percentile for exploit probability.
What it is
A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.
The record
Technical detail
- CVSS v3.1
- 5.0 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.64635 · 99.2th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2023-07-10T15:04Z
EPSS history
Timeline
10 JUL 15:04Z
Arbitrary file write
cvelistv5