Amel Bouziane-Leblond

**Name of the Vulnerable Software and Affected Versions** Kmaleon version 1.1.0.205 **Description** Kmaleon version 1.1.0.205 contains an authenticated SQL injection flaw in the `tipocomb` parameter of the 'kmaleonW.php' file. This allows attackers to manipulate database queries. Exploitation is possible using boolean-based, error-based, and time-based blind SQL injection techniques, potentially leading to the extraction or manipulation of database information. The vulnerable parameter is `tipocomb` within the 'kmaleonW.php' file. **Recommendations** Apply updates to address the SQL injection flaw in the 'kmaleonW.php' file and the `tipocomb` parameter.

**Name of the Vulnerable Software and Affected Versions** Geonetwork versions 3.10 through 4.2.0 **Description** Geonetwork contains a flaw in its PDF rendering process related to XML external entities. This allows attackers to retrieve arbitrary files from the server. The issue stems from an insecure XML parser that can be exploited by crafting malicious XML documents with external entity references. Specifically, attackers can read system files through the `baseURL` parameter when making PDF creation requests. **Recommendations** Versions prior to 4.2.1 should be updated.

**Name of the Vulnerable Software and Affected Versions** LibreOffice versions 24.8 through 24.8.4 LibreOffice versions 25.2 through 25.2.0 **Description** The issue affects LibreOffice's integration with MS SharePoint server, where an additional scheme 'vnd.libreoffice.command' was added to support Office URI Schemes. In the affected versions, a link in a browser using this scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments. This allows attackers to execute arbitrary scripts, potentially leading to remote code execution attacks. The flaw bypasses existing security measures by targeting document collaboration workflows. Millions of users are at risk, particularly those relying on hybrid office solutions. **Recommendations** For LibreOffice versions 24.8 through 24.8.4, update to version 24.8.5 or later. For LibreOffice versions 25.2 through 25.2.0, update to version 25.2.1 or later. As a temporary workaround, consider disabling the use of the 'vnd.libreoffice.command' scheme until a patch is available. Restrict access to internal macros to minimize the risk of exploitation.

**Nome do Software Vulnerável e Versões Afetadas** Versões do LibreOffice anteriores a 24.8.5 **Descrição** O problema está relacionado à validação de entrada inadequada, permitindo que alvos de hiperlink para executáveis do Windows sejam executados incondicionalmente quando ativados. **Recomendações** Para versões anteriores a 24.8.5, atualize para a versão 24.8.5 ou posterior para resolver o problema.

**Nome do software vulnerável e versões afetadas** LibreOffice (versões afetadas não especificadas) **Descrição** O problema está relacionado à execução não verificada de scripts na ligação gráfica ao clique, permitindo que um invasor crie um documento que execute scripts integrados ao LibreOffice sem solicitar a confirmação do usuário. Esses scripts eram anteriormente considerados confiáveis, mas agora são considerados não confiáveis. A vulnerabilidade pode ser explorada por um invasor remoto para executar código arbitrário, incorporando um script especialmente criado em um arquivo que seja aberto pelo usuário. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Apache OpenOffice versions prior to the fixed version **Description** The issue is related to insufficient input validation when processing arguments, allowing a remote attacker to execute arbitrary code. Apache OpenOffice documents can contain links that call internal macros with arbitrary arguments using several URI Schemes. These links can be activated by clicks or automatic document events and should require user approval. However, in the affected versions, certain links do not request approval, potentially resulting in arbitrary script execution. **Recommendations** For Apache OpenOffice versions prior to the fixed version, consider disabling the execution of internal macros with arbitrary arguments until a patch is available. Restrict access to documents that may contain such links to minimize the risk of exploitation. As a temporary workaround, require user approval for all links that call internal macros. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LibreOffice versions prior to 7.4.7 LibreOffice versions prior to 7.5.3 **Description** The issue is related to improper access control in the editor components of LibreOffice, allowing an attacker to craft a document that loads external links without prompting the user for permission. This affects documents that use "floating frames" linked to external files, which would load the contents of those frames without user consent. This behavior is inconsistent with how other linked content is handled in LibreOffice. **Recommendations** For LibreOffice versions prior to 7.4.7, update to version 7.4.7 or later. For LibreOffice versions prior to 7.5.3, update to version 7.5.3 or later. As a temporary workaround, consider avoiding the use of "floating frames" linked to external files until a patch is applied.