CVE-2023-1183

52

FAUCET Score

CVE-2023-1183 is a medium-severity arbitrary file write vulnerability in LibreOffice, affecting various Fedora and Red Hat Enterprise Linux distributions. An attacker can craft a malicious .odb file containing a "database/script" file to write arbitrary content to a new file at an attacker-controlled location. While the CVSS score is 5.5 (MEDIUM) due to local access and user interaction requirements, the FAUCET Risk Score is high at 80/100, indicating a significant potential impact (integrity). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though there is some community discussion on Reddit.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 7.4.6CPE matchmatch criteria	cpe:2.3:a:libreoffice:libreoffice::::::::
		7.5.0CPE matchmatch criteria	cpe:2.3:a:libreoffice:libreoffice:7.5.0:::::::*
		38CPE matchmatch criteria	cpe:2.3:o:fedoraproject:fedora:38:::::::*
		8.0CPE matchmatch criteria	cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
		9.0CPE matchmatch criteria	cpe:2.3:o:redhat:enterprise_linux:9.0:::::::*

CVSS Data

CVSS version used by this source: 3.1

5.0MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

Exploitability Score

1.3

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

64.63%

Probability of exploitation in next 30 days

EPSS Percentile

99.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-26

Model: v2026.06.15

This CVE's current EPSS score of 0.6463 is in the 100th percentile among its peer group of 5,758 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (9)

asteriskpatch availablevia llm_extracted

Fixed in: 7.4.6/7.5.1

check_pointpatch availablevia llm_extracted

Fixed in: 7.4.6/7.5.1

denopatch availablevia llm_extracted

Fixed in: 4.1.15

libreofficepatch availablevia llm_extracted

Fixed in: 4.1.15

nessuspatch availablevia llm_extracted

Fixed in: 4.1.15

postgresqlpatch availablevia llm_extracted

Fixed in: 4.1.15

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: libreoffice-1:7.1.8.1-11.el9

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: libreoffice-1:6.4.7.2-15.el8

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: libreoffice

Vendor Advisories (7)

redhatCVE-2023-1183Moderate

libreoffice: Arbitrary file write

asteriskllm-asterisk-17c055c250202633

Arbitrary File Write in hsqldb 1.8.0

check_pointllm-check_point-cdd4fa89aaac7216

Arbitrary File Write in hsqldb 1.8.0

denollm-deno-81bd38dffa80cfc0

Arbitrary file write in Base

postgresqlllm-postgresql-b0a6b9984be774a9

Arbitrary file write in Base

libreofficellm-libreoffice-c2605cbffc0b2061

Arbitrary file write in Base

nessusllm-nessus-b66e9c09cdbdb58c

Arbitrary file write in Base

References

access.redhat.com / security/cve/CVE-2023-1183

Third Party Advisory

bugzilla.redhat.com / show_bug.cgi

Issue TrackingThird Party Advisory

libreoffice.org / about-us/security/advisories/cve-2023-1183

PatchVendor Advisory

openwall.com / lists/oss-security/2023/12/28/4

openwall.com / lists/oss-security/2024/01/03/4