CVE-2023-6186 (published 2023-12-11T11:56:40.349Z)
Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warning.

In affected versions LibreOffice supports hyperlinks with macro or similar built-in command targets that can be executed when activated without warning the user.



Affected products: Vendor: The Document Foundation
Product: LibreOffice
Versions: 7.5, 7.6