Severity
High
Analysis Summary
CVE-2021-30245
Apache OpenOffice could allow a remote attacker to execute arbitrary code on the system, caused by improper validation of non-http(s) hyperlinks. By persuading a victim to open a specially-crafted link, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
Gain Access
Affected Vendors
Apache
Affected Products
- Apache OpenOffice 4.1.8
- Apache OpenOffice 4.1.9
Remediation
Upgrade to the latest version of OpenOffice (4.1.10 or later).