CVE-2023-1183
MediumAn attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.
Published Jul 10, 2023 · Updated Sep 8, 2026 · Also known as DEBIAN-CVE-2023-1183, DLA-3467-1, DLA-3468-1, DSA-5436-1, DSA-5437-1, DSA-5995-1, SUSE-SU-2023:4496-1, SUSE-SU-2023:4648-1, UBUNTU-CVE-2023-1183, USN-8735-1
Key Facts
Patch immediately- CVE-2023-1183 is a medium-severity vulnerability (CVSS 5.5 v3.1) affecting Libreoffice, Fedora (Fedoraproject), Enterprise Linux (Redhat) and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 65% probability of exploitation in the next 30 days.
- Fixed versions are available, including autocorr-af 1:6.4.7.2-15.0.1.el8, autocorr-af 1:7.1.8.1-11.0.1.el9, autocorr-bg 1:6.4.7.2-15.0.1.el8.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS (30-day exploit likelihood)
65%
Higher than 99.2% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
None known
Get the full CVE-2023-1183 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCRIPT command where the contents of the file could be written to a new file whose location was determined by the attacker.
Affected Products
1,316 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| LibreofficeLibreoffice | 7.5.0 | 7.4.6 |
| FedoraFedoraproject | 38 | n/a |
| Enterprise LinuxRedhat | 8.0, 9.0 | n/a |
| hsqldb1.8.0debian | See advisory | 1.8.0.10+dfsg-10+deb11u1 |
| hsqldbdebian | See advisory | 2.5.1-1+deb11u2 |
Patched Releases
autocorr-af
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-bg
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-ca
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-cs
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-da
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-de
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-dsb
1:7.1.8.1-11.0.1.el9
autocorr-el
1:7.1.8.1-11.0.1.el9
autocorr-en
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-es
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-fa
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-fi
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-fr
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-ga
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-hr
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-hsb
1:7.1.8.1-11.0.1.el9
autocorr-hu
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-is
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-it
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-ja
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-ko
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-lb
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-lt
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-mn
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
autocorr-nl
1:6.4.7.2-15.0.1.el8, 1:7.1.8.1-11.0.1.el9
Timeline
Publicly disclosed
Jul 10, 2023
Last updated
Sep 8, 2026
Weakness Type
- CWE-20 Improper Input Validation
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
References
- advisoryRHSA-2023:6508
- advisoryRHSA-2023:6933
- advisoryhttps://access.redhat.com/security/cve/CVE-2023-1183
- advisoryRHBZ#2208506
- advisoryhttps://bugzilla.suse.com/1209243
FAQ
Common Questions.
A flaw was found in the Libreoffice package.
Affected: Libreoffice versions 7.5.0; Fedora (Fedoraproject) versions 38; Enterprise Linux (Redhat) versions 8.0, 9.0, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including autocorr-af 1:6.4.7.2-15.0.1.el8, autocorr-af 1:7.1.8.1-11.0.1.el9, autocorr-bg 1:6.4.7.2-15.0.1.el8.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2023-1183 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo