CVE-2021-41830

It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advisory.

Score

CVSS 3.1 7.5 High

Status

Modified - security@apache.org

Published

2021-10-11

Last modified

2024-08-04

Weaknesses

CWE-347

Affected products

• Openoffice (Apache)
• Apache Openoffice (Apache Software Foundation)

References

• https://lists.apache.org/thread.html/r97d287c88881aa581f1b18cb01e2cbedc4e6eae85958491acb89b12e%40%3Cusers.openoffice.ap…
• https://lists.apache.org/thread.html/raaab8a3b91f8d7b7ba14f873b8d0fd13952c823acc3385b7a374e754%40%3Cannounce.apache.org…