jollheef / libreoffice-remote-arbitrary-file-disclosure Goto Github PK

I reported this one through the yandex BBP last December and i got all email recorded and now just became an independent research work of your guys after you fix it?
https://t.co/rYqtDcxjio
https://t.co/UH5RabMQd0

Hello Mikhail,

From reading the information that you wrote pertaining to the exploit,
my first thought was that it only affected MS Windows operating
systems and not e. g. Linux. However had, your example also
showed a typical file that can be found on *nix, such as /etc/password
so now I am confused.

If you have the time, and if it would not be too much work, could you
add information as to which operating systems may have been
affected?

Thanks for your time by the way! Feel free to close this issue here
at any moment in time.

Title: CVE-2018-1055 Remote arbitrary file disclosure vulnerability via WEBSERVICE formula
Announced: February 9, 2018

https://www.libreoffice.org/about-us/security/advisories/cve-2018-1055/

Thx for Infos!