Lucene search

[email protected]CVE-2024-23941

HistoryFeb 01, 2024 - 4:15 a.m.

CVE-2024-23941

2024-02-0104:15:49

CWE-79

[email protected]

web.nvd.nist.gov

cve-2024-23941

cross-site scripting

group office

security vulnerability

nvd

remote attack

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

7 High

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

25.2%

JSON

Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and prior to v6.8.31, which may allow a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.

CPENameOperatorVersion
group-office:group_officegroup-office group officelt6.6.182
group-office:group_officegroup-office group officeeq6.5.85
group-office:group_officegroup-office group officeeq6.6.62
group-office:group_officegroup-office group officeeq6.5.79
group-office:group_officegroup-office group officeeq6.5.46
group-office:group_officegroup-office group officeeq6.4.186
group-office:group_officegroup-office group officeeq6.6.28
group-office:group_officegroup-office group officeeq6.4.241
group-office:group_officegroup-office group officeeq6.5.101
group-office:group_officegroup-office group officeeq6.3.73

CPE	Name	Operator	Version
group-office:group_office	group-office group office	lt	6.6.182
group-office:group_office	group-office group office	eq	6.5.85
group-office:group_office	group-office group office	eq	6.6.62
group-office:group_office	group-office group office	eq	6.5.79
group-office:group_office	group-office group office	eq	6.5.46
group-office:group_office	group-office group office	eq	6.4.186
group-office:group_office	group-office group office	eq	6.6.28
group-office:group_office	group-office group office	eq	6.4.241
group-office:group_office	group-office group office	eq	6.5.101
group-office:group_office	group-office group office	eq	6.3.73

Rows per page:

1-10 of 5111

References

github.com/Intermesh/groupoffice/

jvn.jp/en/jp/JVN63567545/

www.group-office.com/

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

7 High

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

25.2%

JSON

Related for CVE-2024-23941

cvelist1 jvn1 prion1