Input Validation and Logic

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. LibreLogo global-event script executionCVE-2019-9851Document Foundation · 78% likely

   CWE-20

2. Macro URL arbitrary script executionCVE-2022-3140The Document Foundation · 7.0% likely

   CWE-20

3. denylist of executable filename extensions possible to bypass under windowsCVE-2021-25631The Document Foundation · 5.0% likely

   CWE-184

4. Insufficient url validation allowing LibreLogo script executionCVE-2019-9850Document Foundation · 2.9% likely

   CWE-20

5. XForms submissions could overwrite local filesCVE-2020-12803The Document Foundation · 1.8% likely

   CWE-20

6. Executable hyperlink targets executed unconditionally on activationCVE-2019-9847Document Foundation · 1.0% likely

   CWE-20

7. Executable hyperlink Windows path targets executed unconditionally on activationCVE-2025-0514The Document Foundation · CVSS 7.2 · 0.3% likely

   CWE-20

8. Macro URL arbitrary script executionCVE-2025-1080The Document Foundation · CVSS 7.2 · 0.3% likely

   CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.