[sunjester]

The flaw, described as a path traversal issue and tracked as CVE-2018-16858, was disclosed in early February by researcher Alex Inführ. The expert found that a hacker could execute code on a system by getting the targeted user to open a specially crafted document that loaded a Python file placed by the attacker anywhere on the device.

https://www.securityweek.com/third-party...openoffice
https://cve.mitre.org/cgi-bin/cvename.cg...2018-16858

[mothered]

Office suites are known for their vulnerabilities (example, macro virus for Microsoft Office).

I'm surprised this wasn't exploited a lot sooner, particularly the fact that It's open-source.