Threats tagged 'ghsa-3vpc-9qf6-qvw3'

A missing authorization vulnerability in Apache OpenOffice through version 4.1.16 allows crafted documents to load external links without user prompt, potentially leaking environment variable contents. The issue is fixed in version 4.1.17.