CVE-2025-0514CWE-20

Executable hyperlink Windows path targets executed unconditionally on activation

High · published February 25, 2025

CVSS v4.0
7.2
EPSS
0%
Percentile
24.4
In the wild
Unconfirmed
What it is

Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targets to be executed unconditionally on activation.This issue affects LibreOffice: from 24.8 before < 24.8.5.

The record
Technical detail
CVSS v4.0
7.2 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:L/VA:H/SC:H/SI:H/SA:H
EPSS
0.00326 · 24.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-02-25T21:16Z
EPSS history
Timeline
  • 25 FEB 21:16Z
    Executable hyperlink Windows path targets executed unconditionally on activation
    cvelistv5