Cloudanix VulnDB

CVE-2023-2255

Medium · 5.3

CVSS

5.3

EPSS

2.2%

Published

May 25, 2023

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A document program could load material from the internet inside certain files without asking the user first, allowing unexpected external access.

Exploitation
Remote Unauthenticated
Attacker needs
None
Complexity
Low
Impact
Data Exposure
Component
Application
Class
Authorization Bypass
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

The flaw permits documents using floating frames linked to external files to fetch and load those external contents automatically without displaying the standard permission prompt, bypassing the access control applied to other linked resources.

Why it matters to the business

Organizations relying on LibreOffice for document handling face risk of silent external resource loading that can leak information or introduce unapproved content, increasing exposure in environments that process untrusted files.

How an attack unfolds

An attacker creates an ODF document containing floating frames that reference attacker-controlled external resources. When the victim opens the document in an affected LibreOffice release the frames load their contents without any user prompt, allowing the attacker to retrieve or deliver data.

How to fix it

Upgrade LibreOffice to version 7.4.7 or newer for the 7.4 branch and to 7.5.3 or newer for the 7.5 branch. Until patches are applied, disable external link loading or restrict document sources.

How to confirm the fix worked

Verify installed LibreOffice version meets or exceeds 7.4.7/7.5.3; test with sample documents containing floating frames to confirm the permission prompt now appears before external loads.

Typical attack path

  1. Craft a malicious ODF document embedding floating frames that reference external attacker-controlled URLs
  2. Deliver the document through email, file shares, or downloads
  3. Victim opens the document using an unpatched LibreOffice version
  4. External frame contents load automatically without permission prompt

How to detect it

Examine LibreOffice process logs and network connection records for unexpected outbound requests to external domains immediately after a document is opened; correlate with file open events for ODF files containing frame elements.

What your security team should do

  • Apply the listed LibreOffice updates across all endpoints without delay
  • Configure policy to block or warn on external content in documents from untrusted origins
  • Include this issue in user awareness training on handling unsolicited documents

The record

Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.7; 7.5 versions prior to 7.5.3.

Affected packages

Ecosystem Package Introduced Fixed
AlmaLinux:8 autocorr-af 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-bg 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-ca 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-cs 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-da 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-de 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-en 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-es 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-fa 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-fi 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-fr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-ga 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-hr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-hu 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-is 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-it 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-ja 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-ko 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-lb 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-lt 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-mn 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-nl 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-pl 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-pt 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-ro 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-ru 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-sk 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-sl 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-sr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-sv 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-tr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-vi 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 autocorr-zh 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-base 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-calc 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-core 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-data 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-draw 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-emailmerge 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-filters 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-gdb-debug-support 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-graphicfilter 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-gtk3 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-ar 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-bg 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-bn 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-ca 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-cs 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-da 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-de 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-dz 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-el 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-en 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-es 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-et 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-eu 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-fi 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-fr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-gl 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-gu 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-he 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-hi 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-hr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-hu 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-id 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-it 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-ja 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-ko 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-lt 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-lv 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-nb 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-nl 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-nn 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-pl 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-pt-BR 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-pt-PT 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-ro 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-ru 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-si 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-sk 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-sl 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-sv 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-ta 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-tr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-uk 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-zh-Hans 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-help-zh-Hant 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-impress 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-af 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-ar 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-as 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-bg 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-bn 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-br 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-ca 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-cs 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-cy 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-da 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-de 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-dz 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-el 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-en 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-es 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-et 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-eu 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-fa 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-fi 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-fr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-ga 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-gl 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-gu 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-he 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-hi 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-hr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-hu 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-id 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-it 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-ja 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-kk 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-kn 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-ko 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-lt 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-lv 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-mai 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-ml 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-mr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-nb 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-nl 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-nn 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-nr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-nso 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-or 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-pa 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-pl 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-pt-BR 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-pt-PT 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-ro 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-ru 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-si 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-sk 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-sl 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-sr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-ss 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-st 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-sv 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-ta 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-te 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-th 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-tn 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-tr 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-ts 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-uk 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-ve 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-xh 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-zh-Hans 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-zh-Hant 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-langpack-zu 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-math 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-ogltrans 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-opensymbol-fonts 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-pdfimport 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-pyuno 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-sdk 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-sdk-doc 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-ure 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-ure-common 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-wiki-publisher 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-writer 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-x11 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreoffice-xsltfilter 0 1:6.4.7.2-15.el8.alma
AlmaLinux:8 libreofficekit 0 1:6.4.7.2-15.el8.alma
AlmaLinux:9 autocorr-af 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-bg 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-ca 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-cs 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-da 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-de 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-dsb 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-el 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-en 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-es 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-fa 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-fi 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-fr 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-ga 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-hr 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-hsb 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-hu 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-is 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-it 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-ja 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-ko 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-lb 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-lt 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-mn 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-nl 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-pl 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-pt 0 1:7.1.8.1-11.el9.alma
AlmaLinux:9 autocorr-ro 0 1:7.1.8.1-11.el9.alma

Related vulnerabilities