CVE-2025-1080

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-1080
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-1080.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-1080
Downstream
Related
Published
2025-03-04T20:15:36.867Z
Modified
2026-06-18T03:55:43.597885100Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with an embedded inner URL that when passed to LibreOffice could call internal macros with arbitrary arguments. This issue affects LibreOffice: from 24.8 before < 24.8.5, from 25.2 before < 25.2.1.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "11.0"
                }
            ],
            "vendor_product": "debian:debian_linux"
        }
    ]
}
References

Affected packages

Git / github.com/libreoffice/core

Affected ranges

Type
GIT
Repo
https://github.com/libreoffice/core
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
8e3f91296d65a47712b8a390b4731fa5a2f6c9af
Fixed
e538fb6403facdfd3db0250c3b3278236c675c2a
Database specific 
{
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "24.8.0.0"
        },
        {
            "fixed": "24.8.5.1"
        },
        {
            "introduced": "25.2.0.0"
        },
        {
            "fixed": "25.2.1.1"
        }
    ],
    "cpe": "cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*"
}

Affected versions

Other
MELD_LIBREOFFICE_REPOS
libreoffice-24-2-branch-point
libreoffice-24-8-branch-point
libreoffice-25-2-branch-point
libreoffice-3-5-branch-point
libreoffice-3-6-branch-point
libreoffice-4-0-branch-point
libreoffice-4-1-branch-point
libreoffice-4-2-branch-point
libreoffice-4-2-milestone-1
libreoffice-4-3-branch-point
libreoffice-4-4-branch-point
libreoffice-5-0-branch-point
libreoffice-5-1-branch-point
libreoffice-5-2-branch-point
libreoffice-5-3-branch-point
libreoffice-5-4-branch-point
libreoffice-6-0-branch-point
libreoffice-6-1-branch-point
libreoffice-6-2-branch-point
libreoffice-6-3-branch-point
libreoffice-6-4-branch-point
libreoffice-7-0-branch-point
libreoffice-7-1-branch-point
libreoffice-7-2-branch-point
libreoffice-7-3-branch-point
libreoffice-7-4-branch-point
libreoffice-7-5-branch-point
libreoffice-7-6-branch-point
windows_build_successful_2011_11_08
gpg4libre-review-5.*
gpg4libre-review-5.4.99
libreoffice-3.*
libreoffice-3.5.0.0
sdremote-2.*
sdremote-2.0.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-1080.json"