VULNERABILITY INTELLIGENCE

CVE-2021-41831

CVSS score5.3 MEDIUM
EPSS probability1.50%
CISA KEVNot currently listed
Published2021-10-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.

Weakness classification

  • security@apache.org: CWE-347
  • nvd@nist.gov: CWE-347

Primary references