CVE-2023-2255
MEDIUMLibreOffice 7.4.0-7.4.6 and 7.5.0-7.5.2 - Unauthenticated External Resource Loading via Floating Frame Links
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2023-2255. PoCs published by elweth-sec, G4sp4rCS, SaintMichae64.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2023-2255, which involves crafting a malicious ODT file to achieve remote code execution (RCE) by embedding a payload in the content.xml file. The exploit automates the process of injecting a command into the ODT file, which, when opened by a vulnerable system, executes the command to fetch and deploy a webshell.
Description
Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.7; 7.5 versions prior to 7.5.3.
Exploits (3)
This repository contains a functional exploit for CVE-2023-2255, which involves crafting a malicious ODT file to achieve remote code execution (RCE) by embedding a payload in the content.xml file. The exploit automates the process of injecting a command into the ODT file, which, when opened by a vulnerable system, executes the command to fetch and deploy a webshell.
This repository contains a functional exploit for CVE-2023-2255, which creates a malicious ODT file embedding a Python payload. The payload executes arbitrary commands to add a user to the Administrators group, demonstrating RCE via script injection in OpenDocument files.
The repository contains a Python script that embeds a payload into an ODT file as a macro, exploiting CVE-2023-2255. The exploit leverages macro execution in LibreOffice to achieve remote code execution (RCE).
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N