PT-2026-104813 · Document Foundation · Libreoffice

Caolán Mcnamara

·

CVE-2026-63266

·

Publicado

2026-10-05

·

Atualizado

2026-10-05

CVSS v4.0

6.8

Média

VetorAV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or create files only inside its own private directory.

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-63266

Produtos afetados

Libreoffice