CVE-2021-25631

Published: May 3, 2021Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-0 series in versions prior to 7.0.5, the denylist can be circumvented by manipulating the link so it doesn't match the denylist but results in ShellExecute attempting to launch an executable type.

Affected (2)

Products: Libreoffice: Libreoffice

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Libreoffice Libreoffice	From 7.0.0 to 7.0.5
Libreoffice Libreoffice	From 7.1.0 to 7.1.2

Related CWEs

Incomplete List of Disallowed Inputs

The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete, leading to resultant weaknesses.

References (4)

https://positive.security/blog/url-open-rce#open-libreoffice

Source: security@documentfoundation.org

ExploitThird Party Advisory

https://www.libreoffice.org/about-us/security/advisories/cve-2021-25631/

Source: security@documentfoundation.org

Vendor Advisory

https://positive.security/blog/url-open-rce#open-libreoffice

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.libreoffice.org/about-us/security/advisories/cve-2021-25631/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.