EDB-44022

PoC

LibreOffice < 6.0.1 - '=WEBSERVICE' Remote Arbitrary File Disclosure

view exploit source exploit_dbtype remoteauthor Mikhail Klementevpublished 2018-02-10catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-6871US	critical9.8	22.8% (98th)	Exploit	2018-02-09
LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use the COM.MICROSOFT.WEBSERVICE function.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.