CVE-2021-28060

2021-04-1417:15:14

Google

osv.dev

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

JSON

A Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs via the url parameter to group/api/upload.php.

CPENameOperatorVersion
groupofficeeq6.3.71
groupofficeeq6.2.88
groupofficeeq6.4.189
groupofficeeq6.3.29
groupofficeeq6.3.44
groupofficeeq6.4.35
groupofficeeq6.3.73
groupofficeeq6.4.159
groupofficeeq6.4.26
groupofficeeq6.4.27

Name	Operator	Version
groupoffice	eq	6.3.71
groupoffice	eq	6.2.88
groupoffice	eq	6.4.189
groupoffice	eq	6.3.29
groupoffice	eq	6.3.44
groupoffice	eq	6.4.35
groupoffice	eq	6.3.73
groupoffice	eq	6.4.159
groupoffice	eq	6.4.26
groupoffice	eq	6.4.27