{"id":"CVE-2025-1080","details":"LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with an embedded inner URL that when passed to LibreOffice could call internal macros with arbitrary arguments.\nThis issue affects LibreOffice: from 24.8 before \u003c 24.8.5, from 25.2 before \u003c 25.2.1.","modified":"2026-07-08T07:08:56.545371776Z","published":"2025-03-04T20:15:36.867Z","related":["ALSA-2025:2868"],"database_specific":{"unresolved_ranges":[{"source":"CPE_STRING","vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.0"},{"last_affected":"11.0"}]}]},"references":[{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00002.html"},{"type":"ADVISORY","url":"https://www.libreoffice.org/about-us/security/advisories/cve-2025-1080"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libreoffice/core","events":[{"introduced":"0"},{"fixed":"8e3f91296d65a47712b8a390b4731fa5a2f6c9af"},{"fixed":"e538fb6403facdfd3db0250c3b3278236c675c2a"}],"database_specific":{"cpe":"cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"24.8.0.0"},{"fixed":"24.8.5.1"},{"introduced":"25.2.0.0"},{"fixed":"25.2.1.1"}],"source":"CPE_RANGE"}}],"versions":["libreoffice-25-2-branch-point","libreoffice-24-8-branch-point","libreoffice-24-2-branch-point","libreoffice-7-6-branch-point","libreoffice-7-5-branch-point","libreoffice-7-4-branch-point","libreoffice-7-3-branch-point","libreoffice-7-2-branch-point","libreoffice-7-1-branch-point","libreoffice-7-0-branch-point","libreoffice-6-4-branch-point","libreoffice-6-3-branch-point","libreoffice-6-2-branch-point","libreoffice-6-1-branch-point","libreoffice-6-0-branch-point","gpg4libre-review-5.4.99","libreoffice-5-4-branch-point","libreoffice-5-3-branch-point","libreoffice-5-2-branch-point","libreoffice-5-1-branch-point","libreoffice-5-0-branch-point","libreoffice-4-4-branch-point","libreoffice-4-3-branch-point","sdremote-2.0.0","libreoffice-4-2-branch-point","libreoffice-4-2-milestone-1","libreoffice-4-1-branch-point","libreoffice-4-0-branch-point","libreoffice-3-6-branch-point","libreoffice-3.5.0.0","libreoffice-3-5-branch-point","windows_build_successful_2011_11_08","MELD_LIBREOFFICE_REPOS"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1080.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}