Uncontrolled Search Path Element Affecting libreoffice-langpack-it package, versions *
Threat Intelligence
EPSS
0.07% (31st
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-CENTOS6-LIBREOFFICELANGPACKIT-5294586
- published 29 Mar 2023
- disclosed 24 Mar 2023
How to fix?
There is no fixed version for Centos:6 libreoffice-langpack-it.
NVD Description
Note: Versions mentioned in the description apply only to the upstream libreoffice-langpack-it package and not the libreoffice-langpack-it package as distributed by Centos.
See How to fix? for Centos:6 relevant fixed versions and status.
Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.
CVSS Scores
version 3.1