Apache OpenOffice: Macro URL arbitrary script execution

CVE-2023-47804

Summary

A security issue in Apache OpenOffice allows documents to contain links that execute internal macros with arbitrary parameters, bypassing user approval for specific URI schemes. When activated, these links can lead to unintended script execution, raising significant security concerns for users. This issue arises from the inadequate handling of user consent during document interactions, particularly affecting specific versions of OpenOffice, as cited in related security discussions and advisories.

References