Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-38745

Apache OpenOffice versions before 4.1.14 may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory.

Published

2023-03-24T16:15:08.130

Last Modified

2025-02-13T15:15:11.950

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Primary
CWE-94
CWE-427
CWE-1188

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	apache	openoffice	< 4.1.14	Yes

References

https://lists.apache.org/thread/q3noq7m681kvtb29m28x74q8cnwnzzo0 Mailing List, Vendor Advisory ([email protected])
https://www.openoffice.org/security/cves/CVE-2022-38745.html Vendor Advisory ([email protected])
https://lists.apache.org/thread/q3noq7m681kvtb29m28x74q8cnwnzzo0 Mailing List, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.openoffice.org/security/cves/CVE-2022-38745.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)