CVE-2021-41830

It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advisory.

• CWE-347
• CWE-347

• https://lists.apache.org/thread.html/r97d287c88881aa581f1b18cb01e2cbedc4e6eae85958491acb89b12e%40%3Cusers.openoffice.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/raaab8a3b91f8d7b7ba14f873b8d0fd13952c823acc3385b7a374e754%40%3Cannounce.apache.org%3E
• https://lists.apache.org/thread.html/r97d287c88881aa581f1b18cb01e2cbedc4e6eae85958491acb89b12e%40%3Cusers.openoffice.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/raaab8a3b91f8d7b7ba14f873b8d0fd13952c823acc3385b7a374e754%40%3Cannounce.apache.org%3E

Published

Oct 11, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41825Verint Workforce Optimization (WFO) 15.2.5.1033 allows HTML …5.3
• CVE-2021-41826PlaceOS Authentication Service before 1.29.10.0 allows app/c…6.1
• CVE-2021-41827Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has …7.5
• CVE-2021-41828Zoho ManageEngine Remote Access Plus before 10.1.2121.1 has …7.5
• CVE-2021-41829Zoho ManageEngine Remote Access Plus before 10.1.2121.1 reli…7.5
• CVE-2021-4183Crash in the pcapng file parser in Wireshark 3.6.0 allows de…5.5
• CVE-2021-41831It is possible for an attacker to manipulate the timestamp o…5.3
• CVE-2021-41832It is possible for an attacker to manipulate documents to ap…7.5
• CVE-2021-41833Zoho ManageEngine Patch Connect Plus before 90099 is vulnera…9.8
• CVE-2021-41834JFrog Artifactory prior to version 7.28.0 and 6.23.38, is vu…6.5
• CVE-2021-41835Fresenius Kabi Agilia Link + version 3.0 does not enforce tr…7.5
• CVE-2021-41836The Fathom Analytics WordPress plugin is vulnerable to Store…4.8