Apache OpenOffice Calc Missing Authorization Vulnerability Allows Unprompted Loading of External Data Sources
Vulnerability
A missing authorization vulnerability in Apache OpenOffice Calc versions through 4.1.15 allows an attacker to create a document that loads links to external data sources without prompting the user. This issue could lead to unauthorized access or manipulation of the linked files.
Impact
Exploitation of this vulnerability could result in external documents being loaded into the spreadsheet application without user consent, potentially leading to unauthorized data access or manipulation.
Remediation
Users are advised to upgrade to Apache OpenOffice version 4.1.16, which addresses this vulnerability. The latest version can be downloaded from the Apache OpenOffice download page.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.