{"id":"CVE-2021-41831","aliases":["EUVD-2021-28832","GHSA-r2f7-jghr-r7x9"],"status":"published","title":"Timestamp Manipulation with Signature Wrapping","description":"It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01502,"percentile":0.74642,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-347"],"published":"2021-10-11T08:10:14Z","modified":"2026-06-17T04:08:58Z","products":[{"vendor":"apache","product":"openoffice"},{"vendor":"apache software foundation","product":"apache openoffice"}],"references":[{"url":"https://lists.apache.org/thread.html/ra74d5057cdc781a36286a83e8bcbc90a7678f030ae73339c35dfc4f9%40%3Cusers.openoffice.apache.org%3E","tags":["x_refsource_MISC","x_transferred","Mailing List","Vendor Advisory"]},{"url":"https://lists.apache.org/thread.html/rc5c277cb83e335696657c5f27da1d1e2b5cb48346b0b55415a233757%40%3Cannounce.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41831"},{"url":"https://lists.apache.org/thread.html/rc5c277cb83e335696657c5f27da1d1e2b5cb48346b0b55415a233757@%3Cannounce.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-r2f7-jghr-r7x9"}],"sources":{"cve":[{"id":"CVE-2021-41831","title":"Timestamp Manipulation with Signature Wrapping","description":"It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.","status":"published","published":"2021-10-11T08:10:14Z","modified":"2024-08-04T03:22:24.979Z","cwes":["CWE-347"],"updated_at":"2026-11-02T14:32:59.105382Z"}],"euvd":[{"id":"EUVD-2021-28832","description":"It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.","status":"published","published":"2021-10-11T08:10:14Z","modified":"2024-08-04T03:22:24Z","updated_at":"2026-11-03T03:24:17.230256Z"}],"ghsa":[{"id":"GHSA-r2f7-jghr-r7x9","title":"It is possible for an attacker to manipulate the timestamp of signed documents. All versions of...","description":"It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.","status":"published","published":"2022-05-24T19:17:14Z","modified":"2023-01-30T05:02:45Z","cwes":["CWE-347"],"updated_at":"2026-11-02T14:46:42.642348Z"}],"nvd":[{"id":"CVE-2021-41831","description":"It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.","status":"published","published":"2021-10-11T08:15:06.967Z","modified":"2026-06-17T04:08:58.843Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:06:59.689345Z"}]}}