CVE-2018-16858 PoC — LibreOffice 路径遍历漏洞

Source

https://github.com/Henryisnotavailable/CVE-2018-16858-Python

Associated Vulnerability

Title: LibreOffice 路径遍历漏洞 (CVE-2018-16858)
Description:It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.

Description

Python implementation of CVE-2018-16858

Readme

# CVE-2018-16858-Python
Python implementation of CVE-2018-16858 
Based on work from [here](https://insert-script.blogspot.com/2019/02/libreoffice-cve-2018-16858-remote-code.html) and [here](https://www.exploit-db.com/exploits/46727)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →