---
cve: "CVE-2024-6472"
severity: "HIGH"
cvss: 7.8
epss: "0.2%"
vendor: "The Document Foundation"
kev: false
exploited: false
published: "2024-08-05 13:15:47"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-20T18:27:11+02:00"
---

# CVE-2024-6472

> 7.8 HIGH

## Beschreibung

Certificate Validation user interface in LibreOffice allows potential vulnerability.




Signed macros are scripts that have been digitally signed by the 
developer using a cryptographic signature. When a document with a signed
 macro is opened a warning is displayed by LibreOffice before the macro 
is executed.

Previously if verification failed the user could fail to understand the failure and choose to enable the macros anyway.


This issue affects LibreOffice: from 24.2 before 24.2.5.

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Erforderlich | good |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Patch verfügbar (OSV)

- 2ccb78ad6bdfe3f3356a7a7f294ec388775c5816 (Commit)

## Referenzen

- <https://www.libreoffice.org/about-us/security/advisories/CVE-2024-6472>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2024-6472) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_