Uncontrolled Search Path Element Affecting libreoffice-langpack-or package, versions *


Severity

Recommended
medium

Based on CentOS security rating.

Threat Intelligence

EPSS
0.12% (47th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS6-LIBREOFFICELANGPACKOR-5294556
  • published29 Mar 2023
  • disclosed24 Mar 2023

Introduced: 24 Mar 2023

CVE-2022-38745  (opens in a new tab)
CWE-427  (opens in a new tab)
CWE-1188  (opens in a new tab)
CWE-94  (opens in a new tab)

How to fix?

There is no fixed version for Centos:6 libreoffice-langpack-or.

NVD Description

Note: Versions mentioned in the description apply only to the upstream libreoffice-langpack-or package and not the libreoffice-langpack-or package as distributed by Centos. See How to fix? for Centos:6 relevant fixed versions and status.

Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.

CVSS Scores

version 3.1