{
  "entrypoint_kind": "open_document",
  "entrypoint_detail": "soffice opens crafted ODP whose linked media (draw:plugin) points to an attacker-hosted HLS playlist naming a remote URL and a local file",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "libreoffice-impress",
    "avmedia-gstreamer",
    "xvfb",
    "python3-http-server"
  ],
  "target_identity": {
    "repository_url": "https://github.com/libreoffice/core",
    "target_digest": "810ef197e190d7804a60e0016052c46ff33792303a200fddda9d5216a64b9900",
    "platform": "linux",
    "architecture": "x86_64"
  },
  "proof_artifacts": [
    "repro/proof/vulnerable-1/http.log",
    "repro/proof/vulnerable-1/lfi-evidence.txt",
    "repro/proof/vulnerable-1/soffice.log",
    "repro/proof/vulnerable-1/stream.m3u8",
    "repro/proof/vulnerable-2/http.log",
    "repro/proof/vulnerable-2/lfi-evidence.txt",
    "repro/proof/vulnerable-2/soffice.log",
    "repro/proof/vulnerable-2/stream.m3u8",
    "repro/proof/fixed-1/soffice.log",
    "repro/proof/fixed-1/stream.m3u8",
    "repro/proof/fixed-2/soffice.log",
    "repro/proof/fixed-2/stream.m3u8"
  ],
  "artifact_sha256": {
    "repro/proof/vulnerable-1/http.log": "8e8729bdd4d45552c924f1d94882ccdb9af909a9300c60077bb2bffc36a85e64",
    "repro/proof/vulnerable-1/lfi-evidence.txt": "521e911d0a5a533264a749661f4b7761dca6e8848c1cabfa4b70388636bd7b75",
    "repro/proof/vulnerable-1/soffice.log": "d6a1b4a41b11526b67fbd4d3edc0f2773eab2a21e3bea1213545aa2160db3650",
    "repro/proof/vulnerable-1/stream.m3u8": "f10b7a5af1a46a30e001250fc815b1f42cf59c77fef386adc7a7089a8e4f85bd",
    "repro/proof/vulnerable-2/http.log": "9a449a8409257a455a03b3b589bc7a3a27b498183d98e803d9243701a20e9d5b",
    "repro/proof/vulnerable-2/lfi-evidence.txt": "a3c6333d58ca20eb755f1d60c8f75c527aba79b71dcd89dffc0da1b450091b70",
    "repro/proof/vulnerable-2/soffice.log": "03cfb0de51ad79fa85c1cf7dfc7b708201c525300b2fd22de57b397a3eb7e07e",
    "repro/proof/vulnerable-2/stream.m3u8": "da487bf6766c1f1103629fde1e1f93f8ef04bd72dbb8f15793ef407efbaa6773",
    "repro/proof/fixed-1/soffice.log": "ed3806b24a5b1d8716432a2501cb02b7d7759b3f4a7d6c8c2fc260eece9f631f",
    "repro/proof/fixed-1/stream.m3u8": "8d9c3268d588c0fe907a30dfc89db51349b12298a4a44441ab59e4c2a47dc4ad",
    "repro/proof/fixed-2/soffice.log": "ed3806b24a5b1d8716432a2501cb02b7d7759b3f4a7d6c8c2fc260eece9f631f",
    "repro/proof/fixed-2/stream.m3u8": "fd9e0613ed579d481ef0a2a717c0eaebbb0a5e73038ad54410c7d3fd8aadb54f"
  },
  "notes": "vulnerable=LibreOffice 26.2.4.2 TDF deb sha256 810ef197e190d7804a60e0016052c46ff33792303a200fddda9d5216a64b9900; fixed=LibreOffice 26.2.5.2 TDF deb sha256 2f03bfb2ac9f33ea7c77331b4b7a23300fb0ed7443566046bf8b5bc51c1bed1e; attempt=vulnerable-1 playlist_fetched=true ssrf=true lfi=true; attempt=vulnerable-2 playlist_fetched=true ssrf=true lfi=true; attempt=fixed-1 playlist_fetched=false ssrf=false lfi=false; attempt=fixed-2 playlist_fetched=false ssrf=false lfi=false; "
}