CVE-2026-63267:详情

CVE-2026-63267

2026-10-05
12h17 +00:00
Server-Side Request Forgery - SSRF
A01-Broken Access ControlA10-Server-Side Req. Forgery (SSRF)
2026-10-06
15h03 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions external data links are updated under the same link update control as other links in a spreadsheet.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-918 Server-Side Request Forgery
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

参考资料