CVE-2019-9849

MEDIUM

LibreOffice <6.2.5 - Info Disclosure

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-9849. PoCs published by mbadanoiu.

AI-analyzed exploit summary This repository provides a detailed writeup and proof-of-concept for CVE-2019-9849, which involves LibreOffice's 'stealth mode' failing to block remote bullet graphics, leading to potential SSRF when documents are saved or exported.

Description

LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who want to disable LibreOffice's ability to include remote resources within a document. A flaw existed where bullet graphics were omitted from this protection prior to version 6.2.5. This issue affects: Document Foundation LibreOffice versions prior to 6.2.5.

Exploits (1)

nomisec WRITEUP

by mbadanoiu · poc

https://github.com/mbadanoiu/CVE-2019-9849

View Code ZIP pw:eip

This repository provides a detailed writeup and proof-of-concept for CVE-2019-9849, which involves LibreOffice's 'stealth mode' failing to block remote bullet graphics, leading to potential SSRF when documents are saved or exported.

Classification

Writeup 90%

Attack Type

Ssrf

Complexity

Moderate

Reliability

Reliable

Target: LibreOffice < 6.2.5

No auth needed

Prerequisites: User interaction to open/save a malicious document · LibreOffice configured in 'stealth mode'

MITRE ATT&CK