Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2022-47502
Modified
More InfoOfficial Page
Source-security@apache.org
View Known Exploited Vulnerability (KEV) details
Published At-24 Mar, 2023 | 16:15
Updated At-13 Feb, 2025 | 17:15

Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes are defined for this purpose. Links can be activated by clicks, or by automatic document events. The execution of such links must be subject to user approval. In the affected versions of OpenOffice, approval for certain links is not requested; when activated, such links could therefore result in arbitrary script execution.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.17.8HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Type: Primary
Version: 3.1
Base score: 7.8
Base severity: HIGH
Vector:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CPE Matches
The Apache Software Foundation
apache
>>openoffice>>Versions up to 4.1.13(inclusive)
cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-20Secondarysecurity@apache.org
CWE-88Secondarysecurity@apache.org
CWE ID: CWE-20
Type: Secondary
Source: security@apache.org
CWE ID: CWE-88
Type: Secondary
Source: security@apache.org
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://www.openwall.com/lists/oss-security/2023/12/28/3security@apache.org
N/A
http://www.openwall.com/lists/oss-security/2024/01/03/3security@apache.org
N/A
https://lists.apache.org/thread/xr6tl91jj2jgcq8pdbrc4d8w13s6xn80security@apache.org
Mailing List
Vendor Advisory
https://www.openoffice.org/security/cves/CVE-2022-47502.htmlsecurity@apache.org
Vendor Advisory
http://www.openwall.com/lists/oss-security/2023/12/28/3af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.openwall.com/lists/oss-security/2024/01/03/3af854a3a-2127-422b-91ae-364da2661108
N/A
https://lists.apache.org/thread/xr6tl91jj2jgcq8pdbrc4d8w13s6xn80af854a3a-2127-422b-91ae-364da2661108
Mailing List
Vendor Advisory
https://www.openoffice.org/security/cves/CVE-2022-47502.htmlaf854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Hyperlink: http://www.openwall.com/lists/oss-security/2023/12/28/3
Source: security@apache.org
Resource: N/A
Hyperlink: http://www.openwall.com/lists/oss-security/2024/01/03/3
Source: security@apache.org
Resource: N/A
Hyperlink: https://lists.apache.org/thread/xr6tl91jj2jgcq8pdbrc4d8w13s6xn80
Source: security@apache.org
Resource:
Mailing List
Vendor Advisory
Hyperlink: https://www.openoffice.org/security/cves/CVE-2022-47502.html
Source: security@apache.org
Resource:
Vendor Advisory
Hyperlink: http://www.openwall.com/lists/oss-security/2023/12/28/3
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.openwall.com/lists/oss-security/2024/01/03/3
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://lists.apache.org/thread/xr6tl91jj2jgcq8pdbrc4d8w13s6xn80
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Mailing List
Vendor Advisory
Hyperlink: https://www.openoffice.org/security/cves/CVE-2022-47502.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Change History
0Changes found
Details not found