The host is installed with LibreOffice 6.2.x before 6.2.7 or 6.3.x before 6.3.1 and is prone to an insufficient URL decoding vulnerability. A flaw is present in the application, which fails to properly handle the macro location categorization. Successful exploitation could allow attackers to perform arbitrary macro execution.