Description
Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links
to be loaded without prompt, possibly transferring the contents of environment variables in the process.
This issue affects Apache OpenOffice: through 4.1.16.
Users are recommended to upgrade to version 4.1.17, which fixes the issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache OpenOffice | ≤ 4.1.16 | — |
Advisories 1
- WID-SEC-2026-4332 Apache OpenOffice: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 4, 2026