Improper Input Validation (CWE-20)
Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes are defined for this purpose. Links can be activated by clicks, or by automatic document events. The execution of such links must be subject to user approval. In the affected versions of OpenOffice, approval for certain links is not requested; when activated, such links could therefore result in arbitrary script execution. This is a corner case of CVE-2022-47502.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Feedly found the first article mentioning CVE-2023-47804. See article
Feedly estimated the CVSS score as HIGH
NVD published the first details for CVE-2023-47804
The vulnerability CVE-2023-47804 in Apache OpenOffice is critical with a CVSS score of [score]. It is being actively exploited in the wild by [who]. There are no proof-of-concept exploits available, but mitigations, detections, and patches are available. There may be downstream impacts to other third-party vendors or technology. See article
EPSS Score was set to: 0.04% (Percentile: 5.7%)
Detection for the vulnerability has been added to Nessus (187659)
Detection for the vulnerability has been added to Qualys (379284)