{
  "entrypoint_kind": "open_document",
  "entrypoint_detail": "Open a crafted .fods Calc document whose calcext:data-mapping (org.libreoffice.calc.csv provider) xlink:href points at a local file (LFI) or attacker HTTP URL (SSRF); document load fetches the link",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "libreoffice-calc-26.2.4.2",
    "libreoffice-calc-26.2.5.2",
    "python3-http-server"
  ],
  "target_identity": {
    "repository_url": "https://github.com/libreoffice/core",
    "target_digest": "810ef197e190d7804a60e0016052c46ff33792303a200fddda9d5216a64b9900",
    "runtime_digest": "2f03bfb2ac9f33ea7c77331b4b7a23300fb0ed7443566046bf8b5bc51c1bed1e",
    "platform": "linux",
    "architecture": "x86_64"
  },
  "proof_artifacts": [
    "repro/http-server-final.log",
    "repro/sheet-fixed-lfi-1.csv",
    "repro/sheet-fixed-lfi-2.csv",
    "repro/sheet-fixed-ssrf-1.csv",
    "repro/sheet-fixed-ssrf-2.csv",
    "repro/sheet-vuln-lfi-1.csv",
    "repro/sheet-vuln-lfi-2.csv",
    "repro/sheet-vuln-ssrf-1.csv",
    "repro/sheet-vuln-ssrf-2.csv",
    "logs/fixed-lfi-1.log",
    "logs/fixed-lfi-2.log",
    "logs/fixed-ssrf-1.log",
    "logs/fixed-ssrf-2.log",
    "logs/vuln-lfi-1.log",
    "logs/vuln-lfi-2.log",
    "logs/vuln-ssrf-1.log",
    "logs/vuln-ssrf-2.log"
  ],
  "artifact_sha256": {
    "repro/http-server-final.log": "aec831cb7a629f0c5ffce88dc07db8b1a3da68c5d650f07eeb7ffeaadd9aa6cc",
    "repro/sheet-fixed-lfi-1.csv": "8bbd12c63448c43e73074929343de17db1a1c47339fb01f0da11f14586ad4084",
    "repro/sheet-fixed-lfi-2.csv": "8bbd12c63448c43e73074929343de17db1a1c47339fb01f0da11f14586ad4084",
    "repro/sheet-fixed-ssrf-1.csv": "8bbd12c63448c43e73074929343de17db1a1c47339fb01f0da11f14586ad4084",
    "repro/sheet-fixed-ssrf-2.csv": "8bbd12c63448c43e73074929343de17db1a1c47339fb01f0da11f14586ad4084",
    "repro/sheet-vuln-lfi-1.csv": "d0307ce5d5cae90d92d5d8bb976a50b0d211d4eb35ee008e49e0a2ef6088c60d",
    "repro/sheet-vuln-lfi-2.csv": "d0307ce5d5cae90d92d5d8bb976a50b0d211d4eb35ee008e49e0a2ef6088c60d",
    "repro/sheet-vuln-ssrf-1.csv": "a99c7e2dd976c58fcf9a8c4096db999ff839ac1388b74916afac37bd8574a9e9",
    "repro/sheet-vuln-ssrf-2.csv": "a99c7e2dd976c58fcf9a8c4096db999ff839ac1388b74916afac37bd8574a9e9",
    "logs/fixed-lfi-1.log": "09100d5beda3c0481d81c9e9d6882c02cd3d240546f034197b060fdcbe45ad91",
    "logs/fixed-lfi-2.log": "e9ebd94e98e26cb0b46fc1aacbb5d0463625e4cbeaadec1b1482d082bd469f42",
    "logs/fixed-ssrf-1.log": "c04a1de392adddf74245430ebd2f0de89d9145a804ebf8c6182dabbafda11ac7",
    "logs/fixed-ssrf-2.log": "fa991096855a4a168f95a5bf1810a5d5e204cd24112bc6b0514ef7f5e371b316",
    "logs/vuln-lfi-1.log": "ea5b813d8b58a86f2a8edf14f72bfa23c4571b4b699990f347cb97d5197a9197",
    "logs/vuln-lfi-2.log": "9b95e30760658bffcbc47f5779fc05e8d836b7d3882e2625ead43dc984551e0b",
    "logs/vuln-ssrf-1.log": "00906e3dc957dce2103bde2f9766ada0bd4936cd1f21d678c5de2d8c84758a91",
    "logs/vuln-ssrf-2.log": "af1d7667d8ed6f990b22a23f8027ab9b6d11ce177c2619ef1a92585c575c5bf7"
  },
  "notes": "vulnerable 26.2.4.2 fetched file:// (LFI into sheet) and http:// (GET SSRF) data-mapping links on load in 2/2 attempts each; fixed 26.2.5.2 did not fetch either in 2/2 attempts"
}