CVE-2019-9850

LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on various document script events such as mouse-over, etc. Protection was added, to address CVE-2019-9848, to block calling LibreLogo from script event handers. However an insufficient url validation vulnerability in LibreOffice allowed malicious to bypass that protection and again trigger calling LibreLogo from script event handlers. This issue affects: Document Foundation LibreOffice versions prior to 6.2.6.

• CWE-20

• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/10/msg00005.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMEGUWMWORC3DOVEHVXLFT3A5RSCMLBH/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WVSDPZJG3UA43X3JXRHJAWXLDZEW77LM/
• https://seclists.org/bugtraq/2019/Aug/28Mailing List, Third Party Advisory
• https://usn.ubuntu.com/4102-1/Third Party Advisory
• https://www.debian.org/security/2019/dsa-4501Third Party Advisory
• https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9850Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00006.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00067.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/10/msg00005.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMEGUWMWORC3DOVEHVXLFT3A5RSCMLBH/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WVSDPZJG3UA43X3JXRHJAWXLDZEW77LM/
• https://seclists.org/bugtraq/2019/Aug/28Mailing List, Third Party Advisory
• https://usn.ubuntu.com/4102-1/Third Party Advisory
• https://www.debian.org/security/2019/dsa-4501Third Party Advisory
• https://www.libreoffice.org/about-us/security/advisories/CVE-2019-9850Vendor Advisory

Published

Aug 15, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9844simple-markdown.js in Khan Academy simple-markdown before 0.…
• CVE-2019-9845madskristensen Miniblog.Core through 2019-01-16 allows remot…
• CVE-2019-9846RockOA 1.8.7 allows remote attackers to obtain sensitive inf…
• CVE-2019-9847A vulnerability in LibreOffice hyperlink processing allows a…
• CVE-2019-9848LibreOffice has a feature where documents can specify that p…9.8
• CVE-2019-9849LibreOffice has a 'stealth mode' in which only documents fro…4.3
• CVE-2019-9851LibreOffice is typically bundled with LibreLogo, a programma…9.8
• CVE-2019-9852LibreOffice has a feature where documents can specify that p…7.8
• CVE-2019-9853LibreOffice documents can contain macros. The execution of t…7.8
• CVE-2019-9854LibreOffice has a feature where documents can specify that p…7.8
• CVE-2019-9855LibreOffice is typically bundled with LibreLogo, a programma…9.8
• CVE-2019-9857In the Linux kernel through 5.0.2, the function inotify_upda…